last executing test programs: 4.360240602s ago: executing program 0 (id=1546): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}, {&(0x7f00000002c0)='\f', 0x1}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x557081, 0x100408) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newspdinfo={0x24, 0x24, 0x3dd681fbf96b935, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xef}}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x24}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001340)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120a000d0000000401a80016000a003a40f8ff070000000000004dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc049e00360db70100000040fad95667e006dcdf63951f215ce29bf1d809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800dd8d000020000000000002000000000000060000060006001500010000001800168014000100000000000000010000001000000011"], 0x3c}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x468, 0x398, 0x1170, 0x1170, 0x170, 0x1170, 0x398, 0x1398, 0x1398, 0x398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00'}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@ipv6={@loopback, @mcast1, [], [], 'bridge_slave_1\x00', 'wg2\x00'}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @remote, @private2, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @local, @loopback, @private1, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x440, 0xffffffff, 0x0, 0x0, 0x1e8, 0xfeffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x5, 0x1, "4ddc44e104cf0706a3d4185b845788524ef7d4da468f1540682ad63ec572"}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2a}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0x8], 0x0, 0xb, 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@eui64={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x1, @local, @loopback, @remote, [], [0x0, 0x0, 0x0, 0xff000000]}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a5) 4.187720299s ago: executing program 0 (id=1551): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg(r1, &(0x7f00000063c0)=[{{&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x4008811) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e5, &(0x7f0000000080)={'macvtap0\x00', 0x4, 0x5}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'veth0_to_bond\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 3.878889588s ago: executing program 0 (id=1558): bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0x503}, 0x18}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a80)=@delchain={0x1c0, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x178, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0xc000}, @TCA_FLOW_EMATCHES={0x144, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7f}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x128, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x84, 0x1, 0x0, 0x0, {{0x0, 0x0, 0x6}, "8714a82e91f188b1718dc741d7a084e93ce0456c96a5d3415d00fa6364694ed585514f08c4b618ba1f30a67a1591f483f340bc8e846db6ba6fe811e16a0d6bee91c5d5afaf90884f27e38bf41cc0ffd4606ede934f46e80adbe24a3b3041b00641780e07a54add25e755d090910fada15ddd5210138436"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7}, {0x4, 0x4, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x6}, {0x0, 0xfa, 0x7, 0x6, 0x9, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0x50, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x267}, "4dedad308dc8434462b5e37576f30e1f171c8217c0e0563db52b1f9c0287315bf10454877a678687739a753c53912f6aa3f44b3754af9b1dfd3847dcd2c2ffee0d"}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0xfffe, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}]}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x2, 0x2, 0x2}, {0x8, 0x2, 0x0, "0ade"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x2}, @TCA_FLOW_MASK={0x8, 0x6, 0x18}, @TCA_FLOW_MASK={0x8, 0x6, 0x5}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x8}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @TCA_RATE={0x6}, @TCA_RATE={0x6, 0x5, {0x4, 0x10}}, @TCA_RATE={0x6, 0x5, {0x9, 0x3}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x91}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xfde3, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r4, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x20040000) 3.87761539s ago: executing program 4 (id=1560): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) (async, rerun: 64) connect$vsock_stream(r0, &(0x7f00000002c0)={0x28, 0x0, 0x0, @host}, 0x10) (async, rerun: 64) connect$vsock_stream(r0, &(0x7f0000000100), 0x10) (async) connect$vsock_stream(r0, 0x0, 0x0) (async) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x19, r2}) (async) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) (async) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f00000001c0)={0x1, 0x17, "d8df77", 0x5, 0x1c}) (async, rerun: 64) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0x3, 0x1}, 0x6) (rerun: 64) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 32) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async, rerun: 32) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) (async) bind$llc(r7, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54, 0x0, 0x0, @broadcast}, 0x10) (async) r8 = socket(0x10, 0x3, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) (async) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, 0x0, 0x0) (async) write(r8, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000001d00000000000000", 0x1c) 3.692249842s ago: executing program 4 (id=1561): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, @in={0x2, 0x0, @multicast2}], 0x2c) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000140)=[@in={0x2, 0x4e23, @local}], 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000be5ffffff000009d77891a13c920d0415ad4c83a3190db9127700d39c1e90a2ef32dda1c384b7e6ae200fee0fb9eeb909f70d4b4c30eb83e772d643a1c34e2cd37c380121525cebc0af7b3adfc34df496bdcc9571eb7ac259ba2ef4e515832a6874b1cb383074486cc2d137dbaf490fa23701ab4a9986af370769a23cb90479d51706767df4480c362ec78625fc8c4f2229d12cf155c27164a2aa315344604d75bdd169193844"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r2, 0x100000, 0x0}, 0x10) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, 0x0, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001480)={0x0, 0x38, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0}, @in6={0xa, 0x4e20, 0xfffffff8, @private0, 0x235}]}, &(0x7f00000014c0)=0x10) 3.676048962s ago: executing program 0 (id=1562): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) listen(r2, 0xfffffff7) 3.569182207s ago: executing program 0 (id=1563): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private2, 0x800, 0x0, 0x1, 0x1, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@private0, 0x800, 0x0, 0xff}, 0x20) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000001}], 0x1, 0x0) recvmsg(r2, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000080)=0x7, 0x4) sendmmsg$inet(r3, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f00000000c0)=0x3fe0, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600), 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'wg1\x00', {0x2, 0x4e23, @loopback=0x7f000000}}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='hybla\x00', 0x5b) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b48309000000f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x4d, 0x11, 0x0, 0x0) recvmsg(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/123, 0x7b}, {&(0x7f0000000380)=""/32, 0x20}, {&(0x7f0000000240)=""/54, 0x36}, {&(0x7f0000000280)=""/147, 0x93}], 0x4, 0x0, 0x0, 0x407006}, 0x0) 3.491244382s ago: executing program 4 (id=1566): syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) (async) r0 = socket(0x18, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x5, @broadcast, 'wg1\x00'}}, 0x1e) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="ac0000001a000100000000000000000002000000000000000000000005001b0000000000850008"], 0xac}}, 0x0) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000000)={0x7, 0x8, 0xa7, 0xfffff800}, 0x10) (async) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xc, @broadcast, 'veth1_to_team\x00'}}, 0x1e) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x101a40, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x2) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x64, r5, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xab3}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008810}, 0x4000020) (async) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) 3.442139319s ago: executing program 0 (id=1567): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x78, 0x0, 0x1, 0x401, 0x0, 0x88ffffff, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}]}, 0x78}, 0x1, 0x600000000000000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, &(0x7f00000003c0), 0x0, 0x40000062, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x1d, r6, 0x2, {0x3, 0xf0, 0x1}, 0xfd}, 0x18, &(0x7f00000000c0)={&(0x7f0000000280)="efa3aa483444f3c1e4c0855c3e944ae8645c2f05424cf67c81a1dca9d7efdbdc4c8e3c5f9e9cf4f72fc7a6aefcfc5dd004991628d20358dff8c692eae2a733459f369eb0c1ab53d6506ae1e8b40a60f9e6ac1b84cb436fff6707754fec5f3c7860efb5851c8c", 0x66}, 0x1, 0x0, 0x0, 0x8800}, 0x900) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240), 0xc30, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r4}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000480)=0x7f, &(0x7f00000004c0)=0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r9 = accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) setsockopt$packet_drop_memb(r9, 0x107, 0x2, &(0x7f0000000440)={r8, 0x1, 0x6, @random="ac3b5cd6df9e"}, 0x10) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r8, 0x3}, 0x18) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r8, 0xffffffffffffffff, {0x0, 0x0, 0x1}, 0x3}, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000e140)={0x0, 0x0, &(0x7f000000e100)={&(0x7f000000d400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}, 0x1, 0x0, 0x0, 0x20044085}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r8, 0x1, {0x2, 0x1, 0x4}, 0xfd}, 0x18) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bc2a, 0x7fffffe, {0x0, 0x0, 0x0, r8, {0x1f, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008844}, 0x4000000) 2.549411664s ago: executing program 4 (id=1579): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r3 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) sendmmsg$inet(r3, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d00)="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", 0x2c6}, {&(0x7f0000000100)="ab29d92818309952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0cd29b7450e741f04aeadf1774a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449908ea5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb2690cba61dae7a17740e8112ff188919c6e2e31a2a054863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1d0a2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb704a610b3738b393eed8633fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33e47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f12f090934c3b32f2f4777c65b1574826727f5f62f842a3bedb18ec4aa931dfa0fc47e4dca15ec180d04cfdfff82fd9c6066c7a4c8e2bee6fe65322c8c0b733c091c7ab9f8e1b60f6c37ef36acd509dec18fcc274d0334c8fa81809a5ddb27cc891a22c5978b8df086393396bf972ffd3013add7b197e6cbf06237757ae14f2eaab0200000049424c8250eb4ae6d5dd57b192825821fce610cb2b2e8edc6814317d652989004ac3c4d131632776692fe34d5d869bf851484323b89ffb405dd52dd1d83c9869da1e7ae545e41d33584f54d98c3229d3f523cf4aa301329b92", 0x2be}, {&(0x7f0000000040)="05437c98b91b1455046f57", 0xb}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_audit(0x10, 0x3, 0x9) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) connect$inet6(r5, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xfffffffc}}, 0x50}}, 0x0) sendmsg$inet(r6, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4041) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)='\x00!', 0x2}, {&(0x7f0000000140)="abffa99a7d6ed2dcacc958fd3a5c773e03b4a54890c6ba34d4a318f17925141e844a5882851431385aa863defbc0d479f945bbd8eb945276a091970bbeccd52a559731b33c20fd6eb7d6adb5ba81c0eccf6ee0dfd3f702812d39c7853360046b50ad6a4436d4247a5e920c58f140a138faa35246b17306e25f6e34b456ccefe6c20a544cb784ec517071b8f1563bb232c4019084d9003f1a2832609a0e8eb141c1ded373dd38c0e827721ecab5570c9b"}, {&(0x7f0000000240)="43e51f1bce2ede7abb6a4b66c403f7e047ecee20f0c2fcb0e9a0fa457ecafec104711845155c12d3083c2643fa79d4831d46244b8543a725fd5366f46c47f28a49d9cd9504e8fcb98c7295b91fddb7740713db6271cd2cabd133fcda03c5c0f034350170b69e304f501b3d0b0adab4ab55293a945272119c6ce79f8290df879fff628d42f94b5057e51e8a86a1879350d393acc57a51418944c4ebd0bc038ee67565694f4a4a655c4c280a6c171c3d9f3526cd4edb361a"}, {&(0x7f0000000300)="f2671cb24621eed7e7a51d5659a146245add4a2f90cb80f9129d9a161de443485cc5ee75345f3572a222faec0745c7d800937747222bbd7f4dc9514a4799640f8255dc6a4743dab90efdb54b411a188a4e021ae5b392d4de7029e547a196c8990184ef06499677b80d5e21e063b3e263e1b2d2df8b2200a968be53e544fc"}], 0x1000000000000215, 0x5, 0x0) 2.467376584s ago: executing program 3 (id=1580): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xfffffffffffffea5, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@remote}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x20}}, {}, {@multicast2}, {@local}, {@local}, {@multicast1}]}]}}}}}}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r3, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f000000c1c0)=@newtfilter={0xbc, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0xfff3}, {}, {0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8c, 0x2, [@TCA_CGROUP_ACT={0x84, 0x1, [@m_gact={0x30, 0x3, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10, 0x5, 0x6, 0xe, 0x4}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_CGROUP_EMATCHES={0x4}]}}]}, 0xbc}}, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f00000000c0)) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0xb0, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000540)=@base={0xa, 0xec00, 0xb3, 0x7f, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r9, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$VFAT_IOCTL_READDIR_BOTH(r9, 0x82307201, &(0x7f0000000740)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xba}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 2.092236365s ago: executing program 3 (id=1581): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xc0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x0, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x1, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0x8, 0x7, 0x5, 0x3, 0x7, 0x0, 0x52, 0x3, [{0x3, 0x2, 0x4, 0x9}, {0x7, 0x8, 0x9b, 0x2}, {0xfffffff8, 0x1, 0x3a, 0x8}, {0x1, 0x1, 0xb, 0xad}]}}]}}]}, 0x84}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.923545311s ago: executing program 3 (id=1582): socket$inet6(0xa, 0x802, 0x88) (async) r0 = socket$inet6(0xa, 0x802, 0x88) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x1f}}}}]}, 0x48}}, 0x0) r7 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_mreqsrc(r7, 0x0, 0x28, &(0x7f0000000000)={@remote, @loopback, @multicast1}, 0xc) write(r3, &(0x7f0000000100), 0x0) (async) write(r3, &(0x7f0000000100), 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r3, 0x0, 0x4008) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="440000001800010000000000000000001d01000008000a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000e00", @ANYRES32=r2, @ANYBLOB="15000400030000e00a0100000325175362eb4cf204000000"], 0x44}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@private1, @in6=@rand_addr=' \x01\x00', 0x4e23, 0x9, 0x4e22, 0x8, 0x2, 0x20, 0xa0, 0x6c, 0x0, r2}, {0xb, 0x4, 0x4, 0x1, 0x80, 0x100000000, 0x3ab, 0x3}, {0xfffffffffffffffc, 0x100000001, 0x7, 0x7}, 0x7, 0x6e6bba, 0x2, 0x1, 0x2, 0x2}, {{@in6=@local, 0x4d4}, 0xa, @in6=@mcast1, 0x3507, 0x4, 0x1, 0x4, 0x5, 0xfc53, 0xb}}, 0xe8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000014c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000207000000000000000000000a000000000500000000000008000000000000000001000085000000000000000000000080000000000000000000615f005f00"], &(0x7f0000001400)=""/149, 0x5e, 0x95, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007911200000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) (async) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendmmsg$inet6(r0, &(0x7f00000035c0)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000001c0)="dda159", 0x3}], 0x1}}], 0x1, 0x4000040) 1.870042789s ago: executing program 4 (id=1583): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x800, 0x2, @remote, 0xfffffffc}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x54, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xda51}, {0xc, 0x90, 0x7ff}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8081}, 0x20044000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200008c20d2fa0600000100000080001b000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x31) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000001100)={0x0, r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x40003, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x48, @void, @value}, 0x94) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000140)={r7, 0x401, 0x4, 0xffffffffffffffff}) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x7, &(0x7f00000000c0)="fbffffff", 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000001080)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000001180)=@newtclass={0x84, 0x28, 0x800, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x5150ed68bbc19cc1, 0xfff1}, {0x0, 0x3}, {0xffff, 0xf}}, [@tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x14}}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @TCA_RATE={0x6, 0x5, {0x7, 0x8}}, @TCA_RATE={0x6, 0x5, {0xff, 0x9}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x5, 0x4}}]}}]}, 0x84}}, 0x20008010) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r11, 0x84, 0x6e, &(0x7f0000000080)=""/4041, &(0x7f0000000000)=0xfc9) sendmsg$xdp(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="a1de9ffaf3fd00ff180dfa49aa32c924b23add9389f7f03cbc9fa84509a839bddbbc5be2afdc344d3e1fcec1c20ba24739ec0de6a8374d27798ad536be", 0x3d}], 0x1, 0x0, 0x0, 0x20000000}, 0x44000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000001400)=ANY=[@ANYBLOB="1c000000b523c9fb5416c841da1a2b66b932a8a8121927ad986537a28fdd5f67524729c24ffadb857814785f52156aa318e7994053732e1d5bf16908dd", @ANYRES16=r13, @ANYBLOB="010027bd7000fddbdf258800000008000300", @ANYRES32=r12, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf254400000008000300", @ANYRES32=r12, @ANYBLOB="0700240045ece00008006b000900000008000c006400000008006b000800000008000d0052000000"], 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) getsockopt$bt_BT_VOICE(r7, 0x112, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r7, 0x8983, &(0x7f0000000100)={0x8, 'bridge_slave_1\x00', {'veth1_to_bridge\x00'}, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x1, @bcast, @rose={'rose', 0x0}, 0x5, 'syz0\x00', @default, 0x8, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @default]}) 1.694579641s ago: executing program 2 (id=1585): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf2502"], 0x114}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x13, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.616734484s ago: executing program 3 (id=1586): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x58, r3, 0x809, 0x70bd29, 0x3, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4004004) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r4) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) sendmmsg$inet6(r4, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)="f001", 0x2}], 0x1}}], 0x1, 0x0) 1.598038809s ago: executing program 4 (id=1587): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000001c0), 0x4) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061114c000000000085000000090000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000840)=0x3ff, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) socket$xdp(0x2c, 0x3, 0x0) unshare(0x22020600) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000040)={'netdevsim0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000000000000731122000000de9334646d9527bacaa9042474ad000006000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.468277437s ago: executing program 2 (id=1588): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000d80)=0x5, 0x4) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000004f6e797ad4830657208b0008000a3f00c8", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x20, 0x3f, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@generic="ba5dd95e"]}]}, 0x20}}, 0x0) 1.446084897s ago: executing program 1 (id=1589): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async, rerun: 64) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001540), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x24, r2, 0x407, 0x0, 0x0, {{}, {0x0, 0x4000}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0xc8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xc8}}, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) (async) getsockopt$inet6_buf(r0, 0x29, 0x1c, 0x0, 0x0) 1.389936623s ago: executing program 3 (id=1590): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000000c0)={0x24, r3, 0x926fdb2c68a18847, 0x0, 0x0, {0x6}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x44, r7, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r5, 0x0, 0xffffffff000) 1.327188631s ago: executing program 2 (id=1591): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x4) setsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000680)="e367ed33e7a6aa279f59d54ba18c9ee9e4640e304661e75bb9d6f7810442b8f0b48598af05d0c3c277517fe50e8f7dbd561625ace8f9a652b9fe0d4a1a29d45090200e812e1b06dd1219f64226f060d1f72f37fcdfc316c0b1f8aff8d9171cea0317311b1fabe1392de166e6847c18ddd9ef2d107c516126cf2949d41cd6aa51f1", 0x81) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x1d, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x480, 0x2e8, 0x5002004a, 0x6, 0x2e8, 0x3, 0x3e8, 0x3c8, 0x3c8, 0x3e8, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@dev, @broadcast=0xfeffffff, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x0, 0x3fa}, [@common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c000100000005001800000000000800100000020000080009002205000008000a000300000008000e0009000000"], 0x5c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x20000000) socket$inet6(0xa, 0x5, 0x8) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r6, 0x1, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 1.261513045s ago: executing program 1 (id=1592): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xc0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x0, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x1, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0x8, 0x7, 0x5, 0x3, 0x7, 0x0, 0x52, 0x3, [{0x3, 0x2, 0x4, 0x9}, {0x7, 0x8, 0x9b, 0x2}, {0xfffffff8, 0x1, 0x3a, 0x8}, {0x1, 0x1, 0xb, 0xad}]}}]}}]}, 0x84}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 968.881251ms ago: executing program 1 (id=1593): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000003, 0x0, 0xfffffffd, 0x100000}}]}]}}}]}, 0x68}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000001800000007000000000000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='mlxsw_sp_acl_tcam_vregion_rehash\x00', r4, 0x0, 0x5}, 0x18) (async) sendmsg$rds(r1, &(0x7f0000000800)={&(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000340)=""/234, 0xea}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f0000000440)=""/79, 0x4f}, {&(0x7f00000004c0)=""/16, 0x10}], 0x5, &(0x7f0000000880)=[@cswp={0x58, 0x114, 0x7, {{0xfffffffc, 0xfffffffb}, &(0x7f0000000580), &(0x7f00000005c0)=0xa128, 0xd, 0x0, 0x8000000000000000, 0xfffffffffffffff7, 0xa, 0x7}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000600)=""/11, 0xb}, &(0x7f0000000640), 0x1}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000680)=""/16, 0x10}, &(0x7f00000006c0)}}, @mask_fadd={0x58, 0x114, 0x8, {{0x81, 0xffff}, &(0x7f0000000700)=0x8, &(0x7f0000000740), 0x1c, 0x1000, 0xa, 0x8e, 0x4, 0x4}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000780)=""/5, 0x5}, &(0x7f00000007c0), 0x31}}], 0x140, 0x24004040}, 0x4008042) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 779.741633ms ago: executing program 2 (id=1594): r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@default, @default, @remote, @bcast, @netrom, @null, @netrom, @null]}, &(0x7f0000000080)=0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'veth0_macvtap\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="8a37094f36e01dfc58eb7561f07b011c805faa9cf7bb6f10e0263a51a3ce073f2f67fe4dc848a1a9b0db6649efdae7640ccc6411cfa15ee51b4b2accf89a06368aabc53666c02f1627fc829588fe1e74c46e29d694359a325fea937be4cef0622593ddea700daf8327b6a0865cca1232a74947c87aa1157733b196a151735eae9b7ad542468a8049826232ad8634abbf29573e08df75d53950bc2115e70255995e63ae5c36409f508a9609265fa0c298def5", 0xb2}, {&(0x7f0000000180)="1d2e9e5f53d8450c7840d60f481354bac14a59f7b46e933b4a6a4843d685a3493bee7f37bc80bcf5dafe97020d2bf62633a65c37c39af64bf0b3c18e8b1aea49459d13bb2d9224a8c6f52797bef0208bedbe2bce755775bc1f2a6b8e89", 0x5d}, {&(0x7f0000000200)="bb4e49faba6dfdb265c40397dd22f0b5f4e5812a9443201a11b9591cceccf0b95f7da70f328511ad0083a9c2daeab2599fda7523", 0x34}, {&(0x7f0000000240)="3f4fbed16407c564177bb611bb40e218e59fccd50276ce6549e597a41ae0fd8138b17a1c73fa478dbfe33ceede34f5996f22a36cd873262eaa638abb23f44725581ee3984eb37879116027781970a68002a18cdd9ad14098dd99445d094a698e7edeb835b0ef71d5f9fc3e584c7abeef8c44b42a5b70f155ba7c598540d3d8c7558f4a2766210a2b7f99a91c14ba3c1ab75e0a5398db8196e8aefb8a93dfe0439463c4fd182b47402818777bd4c2f6aae35d9b4421099ae9fc786d98f0fbb366a62e27703d55113b517888845cc6c0d7d977", 0xd2}, {&(0x7f0000000340)="2f2ba67994d80bf3905897a19fa491ea24de2d0cd58c5a68cc62fff5f7a1ceead219487d6799523e", 0x28}], 0x5, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @remote}}}, @ip_retopts={{0x90, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0xb4, 0x3, 0x9, [{@broadcast, 0xa}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@empty, 0xa}, {@dev={0xac, 0x14, 0x14, 0x22}, 0xe2}, {@rand_addr=0x64010100, 0xce8}, {@remote, 0x7ff}]}, @lsrr={0x83, 0x23, 0x59, [@remote, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x40}, @broadcast, @remote, @remote, @private=0xa010101]}, @lsrr={0x83, 0x13, 0xb9, [@multicast1, @local, @dev={0xac, 0x14, 0x14, 0xd}, @rand_addr=0x64010100]}, @cipso={0x86, 0x15, 0xffffffffffffffff, [{0x2, 0x6, "f4c845e9"}, {0x2, 0x9, "c7690112dee956"}]}]}}}, @ip_tos_u8={{0x11}}], 0xe0}, 0x40800) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000580), &(0x7f00000005c0)=0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000600)={"305904bc628d1b7a557fd05162ef57cb", 0x0, 0x0, {0x0, 0x80}, {0x2, 0xa747}, 0xffffffff, [0x1ff, 0x8, 0x2, 0x3a, 0x5, 0x5, 0x5, 0x0, 0x3, 0xb, 0x0, 0x7, 0x5, 0xfb, 0x2, 0x3]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000700)={{r2}, r3, 0x18, @unused=[0x8, 0x100000001, 0x8, 0x7], @name="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"}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001700)={@rand_addr, 0x0}, &(0x7f0000001740)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001880)={'gretap0\x00', &(0x7f0000001780)={'gretap0\x00', r5, 0x8000, 0x7800, 0x6, 0x7fffffff, {{0x33, 0x4, 0x2, 0x3a, 0xcc, 0x64, 0x0, 0x4, 0x29, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x5, 0x3, '\\'}, {0x2, 0x12, "a3a602cd7bbeef36b6ea44d09165ae77"}, {0x2, 0xf, "a623f69cbab9724fa7cbdb317d"}, {0x1, 0xb, "0136c7919a752beb48"}, {0x0, 0x10, "d3899cae43b7018618663095ef89"}, {0x6, 0xb, "f03dae507c178097e3"}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x10, 0x3, [{0x1, 0xa, "eb7c6ae63f85c68e"}]}, @timestamp_addr={0x44, 0x1c, 0x55, 0x1, 0x7, [{@local, 0x40}, {@empty, 0x765}, {@rand_addr=0x64010100, 0xa}]}, @rr={0x7, 0xb, 0x79, [@multicast1, @local]}, @timestamp={0x44, 0x28, 0x3e, 0x0, 0x2, [0x2, 0xe, 0x4, 0xffff0001, 0x5, 0x0, 0x10001, 0x6, 0x7]}]}}}}}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000018c0)={0xffffffffffffffff}) sendmsg$nl_route(r7, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)=@ipv6_getnetconf={0x4c, 0x52, 0x600, 0x70bd2d, 0x25dfdbff, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0xe}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xa}, @NETCONFA_IFINDEX={0x8, 0x1, r5}, @NETCONFA_IFINDEX={0x8, 0x1, r6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfffffff8}, @NETCONFA_PROXY_NEIGH={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000001a40)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000001a80)=0x2c) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x3a, 0x2, &(0x7f0000001b00)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000001b40)='syzkaller\x00', 0xffffffff, 0xb6, &(0x7f0000001b80)=""/182, 0x40f00, 0x16, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001c40)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001c80)=[0xffffffffffffffff, 0x1], &(0x7f0000001cc0)=[{0x0, 0x1, 0x8, 0x2}, {0x1, 0x3, 0x1, 0x3}, {0x4, 0x2, 0x8, 0xc}], 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001dc0)={&(0x7f0000001ac0)='mm_compaction_end\x00', r8, 0x0, 0x4eb8}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)=@newnexthop={0x60, 0x68, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x2, 0x0, 0x3a}, [@NHA_ID={0x8}, @NHA_GROUP_TYPE={0x6}, @NHA_GROUP={0x24, 0x2, [{0x1, 0x2}, {0x0, 0x6}, {0x2, 0xc}, {0x0, 0x9}]}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_TABLE={0x8, 0x3, 0x45}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000001f40), 0x1, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000001f80)={'rose0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000001fc0)={@private0, 0xfffffff7, r5}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000002000)={'macvlan0\x00', 0x20}) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x10, 0x3f2, 0x2, 0x70bd28, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8005}, 0x8000) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002180), r7) sendmsg$IPVS_CMD_SET_SERVICE(r7, &(0x7f0000002280)={&(0x7f0000002140), 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x7c, r11, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x800}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x32}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2b}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000011}, 0x7829571aad4014bc) shutdown(r2, 0x1) recvmsg$qrtr(r7, &(0x7f0000004740)={&(0x7f00000022c0), 0xc, &(0x7f0000004340)=[{&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/20, 0x14}, {&(0x7f0000003340)=""/4096, 0x1000}], 0x3, &(0x7f0000004380)=[{0x50, 0x0, 0x0, ""/63}, {0xe0, 0x0, 0x0, ""/204}, {0xf8, 0x0, 0x0, ""/227}, {0x10}, {0xa0, 0x0, 0x0, ""/141}, {0xb8, 0x0, 0x0, ""/163}], 0x390, 0x200}, 0x38, 0x1) connect$inet6(r7, &(0x7f0000004780)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x1}, 0x1c) ioctl$AUTOFS_IOC_PROTOVER(r9, 0x80049363, &(0x7f00000047c0)) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DESTS(r12, 0x0, 0x484, &(0x7f0000004800)=""/83, &(0x7f0000004880)=0x53) 627.258512ms ago: executing program 1 (id=1595): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0x6, &(0x7f00000009c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x9, 0x0, r0, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000800)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x2c, r6, 0x22de7750d68715a3, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4004}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write(r4, &(0x7f0000000800)="240000001e005f031420000000000000000000000100000000000800080008c013000000", 0x24) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)=@newlink={0xc8, 0x10, 0x49920d862a921d1b, 0x20000, 0x25dfdc02, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x8}, @IFLA_IPTUN_LINK={0x8}]}}}, @IFLA_MTU={0x8, 0x4, 0xfff}, @IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'vxcan1\x00'}, {0x14, 0x35, 'netdevsim0\x00'}, {0x14, 0x35, 'dvmrp1\x00'}, {0x14, 0x35, 'veth1_to_bridge\x00'}, {0x14, 0x35, 'veth1_to_team\x00'}, {0x14, 0x35, 'veth1_to_hsr\x00'}]}]}, 0xc8}}, 0x8000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xc4}}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r0}, 0x20) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000600)='./file0\x00', 0x0, 0x10, r0}, 0x18) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x8}, 0x18) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0xffffffffffffffff, 0xe000, 0x18}, 0xc) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16000000000000346700"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r14, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r15 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r15, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x10, 0x3f8, 0x10, 0x70bd26, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40050005}, 0x20048081) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0x1, 0xffffffffffffffff}, 0x4) r17 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r17, 0x0) r18 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfaa, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) pselect6(0x40, &(0x7f00000008c0)={0x8d05, 0x1ff, 0x7, 0xfffffffffffffff7, 0x7fc, 0x80000001, 0x5, 0x3}, &(0x7f00000009c0)={0x1, 0x6, 0x1, 0x1ff, 0x2, 0x8, 0x3717, 0x56}, &(0x7f0000000a00)={0xffffffffffff0001, 0xc2, 0x8, 0x3, 0x2, 0xb4c6, 0x4}, &(0x7f0000000a40)={0x77359400}, &(0x7f0000000b00)={&(0x7f0000000a80)={[0x2000ffffffff]}, 0x8}) r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xe, 0x2b, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x0, 0xa, 0x6, 0x0, 0x80, 0xffffffffffffffff}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x4}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x90}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x29}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x4, 0x2f, &(0x7f0000000500)=""/47, 0x41000, 0x44, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xb, 0x3ff, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000880)=[0x1, r10, r11, r12, r13, r14, r16, r17, r18, r19], &(0x7f00000008c0), 0x10, 0x9, @void, @value}, 0x94) 521.967236ms ago: executing program 2 (id=1596): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0)={0x9aa3}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x1a, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x5a, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="b9ff060000000000000014f086dd", 0x0, 0x7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = socket(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r2) (async) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x5) (async) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) (async) sendmmsg(r4, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002a40)=ANY=[@ANYBLOB="f8"], 0x1210}}], 0x2, 0x4084) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={r6, 0x1ff, 0x3}, &(0x7f0000000080)=0x8) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) (async) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async) sendmsg$inet6(r7, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000029000000360000000000000000000000e8000000000000002900000004000000"], 0x100}, 0x0) (async) mmap(&(0x7f0000201000/0x2000)=nil, 0x2000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 380.19612ms ago: executing program 2 (id=1597): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800001000f0ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000081000000bca900000000000035090100000000009500000000000000bf98000000000000a6080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x3}]}}}]}, 0x3c}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) accept4(r6, &(0x7f00000000c0)=@ieee802154={0x24, @short}, &(0x7f0000000140)=0x80, 0x80000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r7}, 0x18) clock_gettime(0x2, &(0x7f0000000b80)={0x0, 0x0}) nanosleep(&(0x7f0000000bc0)={r8, r9+60000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r10, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1}, 0x1c) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r12, r13, 0x2, 0x0, 0x0, @void, @value}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r10, &(0x7f00000000c0)="8d", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @private1}, 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600050a000004050280"], 0x528}}, 0xc000) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r10, 0x84, 0x23, &(0x7f0000000080)={r14}, 0x8) 248.503882ms ago: executing program 1 (id=1598): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)=ANY=[@ANYBLOB="1c0000002c0001000000000000000000040000800800188005acb400"], 0x1c}], 0x1}, 0x0) 194.129559ms ago: executing program 3 (id=1599): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001800dd8d000000000000000002000000000000060000000006001500060000001000168006000100000801000000004c00db373a42081a8004fcc0234934289e940efcce768a603961a9c74c9a415d2e2ecc825cf2671da0eca0e34e2c894ea4da599e957ac27b66ff77abb0663b6f4929ab43a9ab78235a143035a288d56fefda26cf9c6db13736351488ebf516f6167f023f5156ca9e37dc295041891cc8a22e5984f80147dae3b78dd138eccad85031e80247d792c8784f680adaac2e3273a9ff8d54236b4eb7815437d901bdbab9e043"], 0x34}}, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_ringparam={0x11, 0x4, 0x8000006, 0x11, 0x1, 0x80000}}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100766c616e000000002c00028006000100000000001c0003800c00010000010000800000000c00010000000000ffffff7f0400048008000a00", @ANYRES32=r7, @ANYBLOB="08000500", @ANYRES32=r7], 0x6c}, 0x1, 0xba01}, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @null, @bpq0, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) (async) r8 = socket$inet(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r9, 0x1, 0x80, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) close(0x3) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$packet_rx_ring(r11, 0x107, 0xd, 0x0, 0x0) r12 = socket(0x11, 0x3, 0x0) (async) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r13, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r13, &(0x7f0000000000)="38000000010003", 0x7) (async) getsockopt$kcm_KCM_RECV_DISABLE(r12, 0x107, 0x17, 0x0, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x64, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x269}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x64}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r15 = socket(0x1, 0x803, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000020002001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r16, @ANYBLOB], 0x4c}}, 0x4000) 0s ago: executing program 1 (id=1600): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000140)="f257a8ea7bc273dfaeab96850800f439e318243e19c69316dfcc019b6a1126c3bef9", 0x22, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x27c, 0x21, 0x1, 0x0, 0x0, {{@in, @in6=@remote}}, [@migrate={0x219, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty}, {@in=@empty, @in=@private, @in6=@remote, @in6=@mcast2}, {@in=@local, @in6=@local, @in6=@empty, @in6=@private2}, {@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@private, @in=@dev}, {@in6=@mcast2, @in=@broadcast, @in6=@private2, @in6=@remote}]}, @policy_type={0xa}, @replay_esn_val={0x40, 0x17, {0x9, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @proto={0x5}, @mark={0xc}]}, 0x27c}}, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x4, 0x70bd28, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x404c010}, 0x4000000) r6 = socket(0x2, 0x80805, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f00000004c0)=r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts. [ 73.537048][ T5821] cgroup: Unknown subsys name 'net' [ 73.648575][ T5821] cgroup: Unknown subsys name 'cpuset' [ 73.657334][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.320484][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.724016][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.744815][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.774458][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.805667][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.815126][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.823319][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.881339][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.891235][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.901380][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.910283][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.944291][ T5834] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.953476][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.992997][ T5143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.003838][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.017980][ T5143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.031009][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.042536][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.061996][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.070363][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.084846][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.094998][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.104475][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.131348][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.140185][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.162113][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.173801][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.184496][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.194097][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.203489][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.225267][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.662634][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 78.688977][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 78.754367][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 78.926355][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 78.962776][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.972282][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.980667][ T5839] bridge_slave_0: entered allmulticast mode [ 78.989120][ T5839] bridge_slave_0: entered promiscuous mode [ 78.999549][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 79.040533][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.048566][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.057079][ T5839] bridge_slave_1: entered allmulticast mode [ 79.064734][ T5839] bridge_slave_1: entered promiscuous mode [ 79.110896][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.124248][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.135179][ T5831] bridge_slave_0: entered allmulticast mode [ 79.142349][ T5831] bridge_slave_0: entered promiscuous mode [ 79.178632][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.187604][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.196086][ T5835] bridge_slave_0: entered allmulticast mode [ 79.203214][ T5835] bridge_slave_0: entered promiscuous mode [ 79.211448][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.219906][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.227946][ T5831] bridge_slave_1: entered allmulticast mode [ 79.236138][ T5831] bridge_slave_1: entered promiscuous mode [ 79.284755][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.293651][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.301588][ T5835] bridge_slave_1: entered allmulticast mode [ 79.309148][ T5835] bridge_slave_1: entered promiscuous mode [ 79.335416][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.385771][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.400111][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.440082][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.481362][ T5839] team0: Port device team_slave_0 added [ 79.515600][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.535976][ T5839] team0: Port device team_slave_1 added [ 79.563251][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.579594][ T5831] team0: Port device team_slave_0 added [ 79.588568][ T5831] team0: Port device team_slave_1 added [ 79.622387][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.629875][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.637608][ T5838] bridge_slave_0: entered allmulticast mode [ 79.644558][ T5838] bridge_slave_0: entered promiscuous mode [ 79.689886][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.697173][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.723996][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.738681][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.747415][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.755723][ T5842] bridge_slave_0: entered allmulticast mode [ 79.763288][ T5842] bridge_slave_0: entered promiscuous mode [ 79.771679][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.779697][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.787619][ T5838] bridge_slave_1: entered allmulticast mode [ 79.794766][ T5838] bridge_slave_1: entered promiscuous mode [ 79.812336][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.820129][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.846812][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.859447][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.867962][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.895682][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.913822][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.921785][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.931312][ T5842] bridge_slave_1: entered allmulticast mode [ 79.937503][ T5143] Bluetooth: hci0: command tx timeout [ 79.939833][ T5842] bridge_slave_1: entered promiscuous mode [ 79.964702][ T5835] team0: Port device team_slave_0 added [ 79.972340][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.979645][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.008614][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.056780][ T5835] team0: Port device team_slave_1 added [ 80.083682][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.088696][ T5143] Bluetooth: hci1: command tx timeout [ 80.099869][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.112152][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.156177][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.165592][ T5143] Bluetooth: hci3: command tx timeout [ 80.229469][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.236608][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.264544][ T5143] Bluetooth: hci2: command tx timeout [ 80.271999][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.288601][ T5839] hsr_slave_0: entered promiscuous mode [ 80.296550][ T5839] hsr_slave_1: entered promiscuous mode [ 80.316493][ T5838] team0: Port device team_slave_0 added [ 80.324319][ T5143] Bluetooth: hci4: command tx timeout [ 80.327441][ T5831] hsr_slave_0: entered promiscuous mode [ 80.337844][ T5831] hsr_slave_1: entered promiscuous mode [ 80.345285][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.353724][ T5831] Cannot create hsr debugfs directory [ 80.361386][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.369385][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.397036][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.418918][ T5842] team0: Port device team_slave_0 added [ 80.427964][ T5838] team0: Port device team_slave_1 added [ 80.481956][ T5842] team0: Port device team_slave_1 added [ 80.512929][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.520729][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.548380][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.562185][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.569648][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.596009][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.653859][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.662491][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.689835][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.742995][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.751853][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.781659][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.820654][ T5835] hsr_slave_0: entered promiscuous mode [ 80.828004][ T5835] hsr_slave_1: entered promiscuous mode [ 80.835642][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.843346][ T5835] Cannot create hsr debugfs directory [ 80.937040][ T5838] hsr_slave_0: entered promiscuous mode [ 80.943877][ T5838] hsr_slave_1: entered promiscuous mode [ 80.951741][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.959962][ T5838] Cannot create hsr debugfs directory [ 80.982576][ T5842] hsr_slave_0: entered promiscuous mode [ 80.989809][ T5842] hsr_slave_1: entered promiscuous mode [ 80.996578][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.004462][ T5842] Cannot create hsr debugfs directory [ 81.293982][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.309222][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.351960][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.384916][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.420302][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.450117][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.469647][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.492634][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.563079][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.590957][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.601452][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.626398][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.721729][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.735811][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.749297][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.779875][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.851209][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.885209][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.902653][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.915610][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.931945][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.962177][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.985294][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.004490][ T5143] Bluetooth: hci0: command tx timeout [ 82.015963][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.050277][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.058025][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.070202][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.077594][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.101074][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.108263][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.146072][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.153323][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.164686][ T5143] Bluetooth: hci1: command tx timeout [ 82.215407][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.245790][ T5143] Bluetooth: hci3: command tx timeout [ 82.271298][ T5831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.282247][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.325887][ T5143] Bluetooth: hci2: command tx timeout [ 82.337908][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.376297][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.383969][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.403546][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.410894][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.420285][ T5143] Bluetooth: hci4: command tx timeout [ 82.497275][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.550312][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.582663][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.625829][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.633143][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.702980][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.710215][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.739482][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.781637][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.789071][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.841880][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.851271][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.867794][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.929030][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.102186][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.142891][ T5831] veth0_vlan: entered promiscuous mode [ 83.196612][ T5831] veth1_vlan: entered promiscuous mode [ 83.332021][ T5831] veth0_macvtap: entered promiscuous mode [ 83.369515][ T5838] veth0_vlan: entered promiscuous mode [ 83.383086][ T5831] veth1_macvtap: entered promiscuous mode [ 83.413357][ T5838] veth1_vlan: entered promiscuous mode [ 83.462512][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.492911][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.532591][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.567270][ T5838] veth0_macvtap: entered promiscuous mode [ 83.579367][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.589656][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.600276][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.610256][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.631831][ T5838] veth1_macvtap: entered promiscuous mode [ 83.709090][ T5839] veth0_vlan: entered promiscuous mode [ 83.720980][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.738630][ T5839] veth1_vlan: entered promiscuous mode [ 83.776705][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.793461][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.809738][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.887874][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.900535][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.912372][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.923329][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.933504][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.943553][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.952675][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.972854][ T5835] veth0_vlan: entered promiscuous mode [ 83.996751][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.022298][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.039070][ T5835] veth1_vlan: entered promiscuous mode [ 84.067134][ T5839] veth0_macvtap: entered promiscuous mode [ 84.095030][ T5143] Bluetooth: hci0: command tx timeout [ 84.099468][ T5839] veth1_macvtap: entered promiscuous mode [ 84.141774][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.150850][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.198729][ T5835] veth0_macvtap: entered promiscuous mode [ 84.235587][ T5842] veth0_vlan: entered promiscuous mode [ 84.244693][ T5143] Bluetooth: hci1: command tx timeout [ 84.260725][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.277007][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.287600][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.298165][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.310998][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.324974][ T5143] Bluetooth: hci3: command tx timeout [ 84.330494][ T5835] veth1_macvtap: entered promiscuous mode [ 84.334385][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.377909][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.405971][ T5143] Bluetooth: hci2: command tx timeout [ 84.418534][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.446517][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.459879][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.475505][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.485232][ T5143] Bluetooth: hci4: command tx timeout [ 84.493746][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.504308][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.513794][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.523822][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.536419][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.551729][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.569254][ T5842] veth1_vlan: entered promiscuous mode [ 84.615621][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.633048][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.680503][ T5842] veth0_macvtap: entered promiscuous mode [ 84.693118][ T5842] veth1_macvtap: entered promiscuous mode [ 84.737292][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.756409][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.785838][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.801486][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.813400][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.826681][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.839982][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.853257][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.869839][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.882513][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.894189][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.904790][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.915390][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.933232][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.997584][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.013465][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.055568][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.068490][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.079121][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.091277][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.103425][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.114553][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.125000][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.135678][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.148387][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.159005][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.170289][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.180614][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.191791][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.202484][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.213713][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.224405][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.236609][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.250006][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.260981][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.281621][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.291851][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.302656][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.329962][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.337973][ T5919] netlink: 'syz.0.6': attribute type 1 has an invalid length. [ 85.347253][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.347319][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.347352][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.384813][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.414582][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.595418][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.612956][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.634710][ T5931] Bluetooth: MGMT ver 1.23 [ 85.736703][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.747016][ T5936] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.758219][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.793384][ T5936] xt_CT: You must specify a L4 protocol and not use inversions on it [ 85.831190][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.861264][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.044729][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.083359][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.165177][ T5143] Bluetooth: hci0: command tx timeout [ 86.324748][ T5143] Bluetooth: hci1: command tx timeout [ 86.352137][ T5951] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.416957][ T5143] Bluetooth: hci3: command tx timeout [ 86.446874][ T5954] sctp: [Deprecated]: syz.2.3 (pid 5954) Use of struct sctp_assoc_value in delayed_ack socket option. [ 86.446874][ T5954] Use struct sctp_sack_info instead [ 86.484888][ T5143] Bluetooth: hci2: command tx timeout [ 86.571276][ T5143] Bluetooth: hci4: command tx timeout [ 86.655236][ T5961] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13'. [ 86.807235][ T5971] vlan1: entered promiscuous mode [ 86.854693][ T5971] vlan1: left promiscuous mode [ 87.004832][ T5978] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18'. [ 87.352678][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.361775][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.591750][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24'. [ 87.821469][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.886279][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.127957][ T5981] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.145464][ T5981] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.162032][ T5981] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.171509][ T5981] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.489122][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.31'. [ 88.840781][ T6025] netlink: 'syz.4.33': attribute type 1 has an invalid length. [ 88.868718][ T6025] netlink: 'syz.4.33': attribute type 1 has an invalid length. [ 89.100591][ T6039] Zero length message leads to an empty skb [ 89.311800][ T6046] –eth0_vlan: renamed from bridge_slave_1 (while UP) [ 89.674966][ T6066] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 89.794537][ T25] IPVS: starting estimator thread 0... [ 89.914436][ T6070] IPVS: using max 18 ests per chain, 43200 per kthread [ 90.111075][ T6078] Cannot find set identified by id 0 to match [ 90.342266][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 90.380828][ T6091] netlink: 'syz.2.52': attribute type 4 has an invalid length. [ 90.394796][ T6091] netlink: 'syz.2.52': attribute type 11 has an invalid length. [ 90.408516][ T6093] netlink: 16 bytes leftover after parsing attributes in process `syz.1.53'. [ 90.421529][ T6093] netlink: 32 bytes leftover after parsing attributes in process `syz.1.53'. [ 90.435889][ T6091] netlink: 224 bytes leftover after parsing attributes in process `syz.2.52'. [ 90.481663][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'. [ 90.521387][ T6095] netlink: 32 bytes leftover after parsing attributes in process `syz.1.53'. [ 90.561356][ T6093] gretap1: entered promiscuous mode [ 90.604081][ T6093] gretap1: entered allmulticast mode [ 90.706831][ T6091] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.718227][ T6091] bond0: (slave bond1): Enslaving as an active interface with an up link [ 90.855337][ T6107] syz.4.55 uses obsolete (PF_INET,SOCK_PACKET) [ 91.024439][ T6121] Driver unsupported XDP return value 0 on prog (id 16) dev N/A, expect packet loss! [ 91.363865][ T6138] veth1_to_hsr: entered promiscuous mode [ 91.590006][ T6138] veth1_to_hsr (unregistering): left promiscuous mode [ 91.806471][ T6138] hsr_slave_1 (unregistering): left promiscuous mode [ 91.967439][ T6172] netlink: 'syz.3.67': attribute type 12 has an invalid length. [ 92.073192][ T6181] __nla_validate_parse: 5 callbacks suppressed [ 92.073215][ T6181] netlink: 40 bytes leftover after parsing attributes in process `syz.4.69'. [ 92.168472][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'. [ 92.198750][ T6185] netlink: 36 bytes leftover after parsing attributes in process `syz.2.68'. [ 92.228365][ T51] cfg80211: failed to load regulatory.db [ 92.811240][ T6213] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 92.814733][ T6216] dccp_v6_rcv: dropped packet with invalid checksum [ 92.889171][ T6213] pim6reg: entered allmulticast mode [ 92.909562][ T6213] pim6reg: left allmulticast mode [ 93.235389][ T6227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.543325][ T5883] hid-generic 0005:7FFF:0008.0001: item fetching failed at offset 0/3 [ 93.568769][ T5883] hid-generic 0005:7FFF:0008.0001: probe with driver hid-generic failed with error -22 [ 93.751651][ T6255] TCP: TCP_TX_DELAY enabled [ 94.697385][ T6311] netlink: 'syz.3.99': attribute type 4 has an invalid length. [ 95.795639][ T6363] netlink: 19336 bytes leftover after parsing attributes in process `syz.1.116'. [ 96.147312][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.121'. [ 96.201842][ T6379] netlink: 'syz.0.119': attribute type 13 has an invalid length. [ 96.218305][ T6381] netlink: 'syz.4.121': attribute type 13 has an invalid length. [ 96.242223][ T6379] netlink: 40 bytes leftover after parsing attributes in process `syz.0.119'. [ 96.272150][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 96.324888][ T6379] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 96.489594][ T6391] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 96.777328][ T6409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.126'. [ 96.826666][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.834961][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.272659][ T6403] netlink: 'syz.0.126': attribute type 12 has an invalid length. [ 97.298583][ T6403] netlink: 132 bytes leftover after parsing attributes in process `syz.0.126'. [ 97.513404][ T6439] veth0: entered promiscuous mode [ 97.530371][ T6437] veth0: left promiscuous mode [ 97.619707][ T6442] Cannot find del_set index 65531 as target [ 97.818242][ T6443] dvmrp0: entered allmulticast mode [ 97.911359][ T6443] netlink: 'syz.4.133': attribute type 1 has an invalid length. [ 97.935886][ T6443] netlink: 212140 bytes leftover after parsing attributes in process `syz.4.133'. [ 98.334624][ T6473] netlink: 56 bytes leftover after parsing attributes in process `syz.1.145'. [ 98.691174][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.152'. [ 98.691196][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.152'. [ 98.764585][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.152'. [ 99.025362][ T6509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.159'. [ 99.062591][ T6504] tipc: Can't bind to reserved service type 2 [ 99.088660][ T6509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.159'. [ 99.231472][ T6523] openvswitch: netlink: nsh attr 8192 is out of range max 3 [ 99.240020][ T6523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.660880][ T6538] netlink: 40 bytes leftover after parsing attributes in process `syz.3.166'. [ 99.898215][ T6548] netlink: 48 bytes leftover after parsing attributes in process `syz.2.167'. [ 100.106359][ T6557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 100.238803][ T6560] xt_hashlimit: size too large, truncated to 1048576 [ 100.340728][ T6560] syz.2.172: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 100.369738][ T6560] CPU: 1 UID: 0 PID: 6560 Comm: syz.2.172 Not tainted 6.13.0-rc3-syzkaller-00154-g30b981796b94 #0 [ 100.380862][ T6560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 100.391618][ T6560] Call Trace: [ 100.395787][ T6560] [ 100.399121][ T6560] dump_stack_lvl+0x241/0x360 [ 100.404232][ T6560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.410232][ T6560] ? __pfx__printk+0x10/0x10 [ 100.416665][ T6560] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 100.425233][ T6560] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 100.432285][ T6560] warn_alloc+0x278/0x410 [ 100.437431][ T6560] ? __pfx_warn_alloc+0x10/0x10 [ 100.442938][ T6560] ? htable_create+0x102/0x880 [ 100.448029][ T6560] ? __get_vm_area_node+0x1c8/0x2d0 [ 100.454004][ T6560] ? __get_vm_area_node+0x25c/0x2d0 [ 100.460712][ T6560] __vmalloc_node_range_noprof+0x62f/0x1380 [ 100.466807][ T6560] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 100.473487][ T6560] ? hashlimit_mt_check_common+0x691/0xa40 [ 100.481299][ T6560] ? htable_create+0x102/0x880 [ 100.486396][ T6560] vmalloc_noprof+0x79/0x90 [ 100.491712][ T6560] ? htable_create+0x102/0x880 [ 100.496976][ T6560] htable_create+0x102/0x880 [ 100.502305][ T6560] hashlimit_mt_check_common+0x710/0xa40 [ 100.508463][ T6560] hashlimit_mt_check_v1+0x2ea/0x540 [ 100.515271][ T6560] ? __pfx_lock_release+0x10/0x10 [ 100.520782][ T6560] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 100.527028][ T6560] ? trace_contention_end+0x3c/0x120 [ 100.532741][ T6560] ? static_key_slow_inc+0x21/0x30 [ 100.538043][ T6560] xt_check_match+0x368/0xa40 [ 100.542801][ T6560] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 100.549225][ T6560] ? __pfx_xt_check_match+0x10/0x10 [ 100.554668][ T6560] ? xt_find_match+0x1d3/0x210 [ 100.559700][ T6560] translate_table+0x1671/0x2330 [ 100.565391][ T6560] ? __pfx_translate_table+0x10/0x10 [ 100.571126][ T6560] ? __might_fault+0xaa/0x120 [ 100.577092][ T6560] ? __pfx_lock_release+0x10/0x10 [ 100.582462][ T6560] ? __virt_addr_valid+0x183/0x530 [ 100.588339][ T6560] ? __might_fault+0xc6/0x120 [ 100.593664][ T6560] ? _copy_from_user+0x99/0xc0 [ 100.598729][ T6560] ? copy_from_sockptr_offset+0x6b/0xb0 [ 100.604531][ T6560] do_ip6t_set_ctl+0xe4c/0x1270 [ 100.609662][ T6560] ? __pfx___mutex_trylock_common+0x10/0x10 [ 100.615921][ T6560] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 100.621538][ T6560] ? __pfx_lock_release+0x10/0x10 [ 100.628054][ T6560] ? rcu_is_watching+0x15/0xb0 [ 100.633106][ T6560] ? trace_contention_end+0x3c/0x120 [ 100.638942][ T6560] ? __mutex_unlock_slowpath+0x21e/0x790 [ 100.644839][ T6560] ? __pfx___mutex_lock+0x10/0x10 [ 100.650101][ T6560] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 100.658863][ T6560] ? futex_wait+0x285/0x360 [ 100.664262][ T6560] nf_setsockopt+0x295/0x2c0 [ 100.669427][ T6560] rawv6_setsockopt+0x327/0x740 [ 100.675046][ T6560] ? __pfx_aa_sk_perm+0x10/0x10 [ 100.680157][ T6560] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 100.685923][ T6560] ? aa_sock_opt_perm+0x79/0x120 [ 100.691493][ T6560] ? sock_common_setsockopt+0x37/0xc0 [ 100.697184][ T6560] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 100.703239][ T6560] do_sock_setsockopt+0x3af/0x720 [ 100.708590][ T6560] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 100.714703][ T6560] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 100.720755][ T6560] __x64_sys_setsockopt+0x1ee/0x280 [ 100.726325][ T6560] do_syscall_64+0xf3/0x230 [ 100.731246][ T6560] ? clear_bhb_loop+0x35/0x90 [ 100.736055][ T6560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.742011][ T6560] RIP: 0033:0x7f0b17985d29 [ 100.746773][ T6560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.767582][ T6560] RSP: 002b:00007f0b18748038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 100.776138][ T6560] RAX: ffffffffffffffda RBX: 00007f0b17b75fa0 RCX: 00007f0b17985d29 [ 100.784250][ T6560] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 100.792341][ T6560] RBP: 00007f0b17a01aa8 R08: 00000000000004c0 R09: 0000000000000000 [ 100.800347][ T6560] R10: 00000000200004c0 R11: 0000000000000246 R12: 0000000000000000 [ 100.808614][ T6560] R13: 0000000000000000 R14: 00007f0b17b75fa0 R15: 00007ffdedc6e178 [ 100.816833][ T6560] [ 100.873319][ T6560] Mem-Info: [ 100.994256][ T6560] active_anon:4614 inactive_anon:0 isolated_anon:0 [ 100.994256][ T6560] active_file:1096 inactive_file:38253 isolated_file:0 [ 100.994256][ T6560] unevictable:768 dirty:399 writeback:0 [ 100.994256][ T6560] slab_reclaimable:9936 slab_unreclaimable:98394 [ 100.994256][ T6560] mapped:28451 shmem:1432 pagetables:731 [ 100.994256][ T6560] sec_pagetables:0 bounce:0 [ 100.994256][ T6560] kernel_misc_reclaimable:0 [ 100.994256][ T6560] free:1349539 free_pcp:261 free_cma:0 [ 101.076586][ T6585] syz.4.178[6585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.076702][ T6585] syz.4.178[6585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.112740][ T6560] Node 0 active_anon:18556kB inactive_anon:0kB active_file:4384kB inactive_file:152944kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114004kB dirty:1592kB writeback:0kB shmem:4192kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11112kB pagetables:3024kB sec_pagetables:0kB all_unreclaimable? no [ 101.133199][ T6585] syz.4.178[6585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.194629][ T6560] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 101.266054][ T6560] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 101.367624][ T6560] lowmem_reserve[]: 0 2465 2466 0 0 [ 101.373331][ T6560] Node 0 DMA32 free:1471064kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:18540kB inactive_anon:0kB active_file:4384kB inactive_file:152116kB unevictable:1536kB writepending:1592kB present:3129332kB managed:2552784kB mlocked:0kB bounce:0kB free_pcp:2124kB local_pcp:1016kB free_cma:0kB [ 101.446809][ T6560] lowmem_reserve[]: 0 0 0 0 0 [ 101.452700][ T6560] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 101.495081][ T6560] lowmem_reserve[]: 0 0 0 0 0 [ 101.500391][ T6560] Node 1 Normal free:3907460kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 101.567958][ T6560] lowmem_reserve[]: 0 0 0 0 0 [ 101.584917][ T6560] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 101.607150][ T6560] Node 0 DMA32: 13*4kB (U) 40*8kB (UME) 300*16kB (U) 26*32kB (UME) 6*64kB (UME) 4*128kB (UE) 1*256kB (E) 2*512kB (UM) 8*1024kB (UM) 8*2048kB (M) 351*4096kB (M) = 1470452kB [ 101.631597][ T6560] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 101.668135][ T6560] Node 1 Normal: 197*4kB (UME) 58*8kB (UME) 40*16kB (UME) 195*32kB (UME) 97*64kB (UME) 33*128kB (UME) 15*256kB (UME) 10*512kB (UME) 3*1024kB (UME) 3*2048kB (U) 945*4096kB (M) = 3907460kB [ 101.701720][ T6560] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 101.729085][ T6560] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 101.740287][ T6560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 101.751054][ T6560] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 101.778591][ T6560] 40808 total pagecache pages [ 101.785514][ T6560] 0 pages in swap cache [ 101.790550][ T6560] Free swap = 124996kB [ 101.796185][ T6560] Total swap = 124996kB [ 101.800745][ T6560] 2097051 pages RAM [ 101.805612][ T6560] 0 pages HighMem/MovableOnly [ 101.810994][ T6560] 427005 pages reserved [ 101.817163][ T6560] 0 pages cma reserved [ 102.127997][ T6620] netlink: 'syz.1.192': attribute type 20 has an invalid length. [ 102.212922][ T6623] netlink: 'syz.4.194': attribute type 1 has an invalid length. [ 102.236449][ T6623] netlink: 'syz.4.194': attribute type 2 has an invalid length. [ 102.493942][ T6636] netlink: 'syz.1.196': attribute type 13 has an invalid length. [ 102.517825][ T6636] __nla_validate_parse: 10 callbacks suppressed [ 102.517857][ T6636] netlink: 40 bytes leftover after parsing attributes in process `syz.1.196'. [ 102.542782][ T6643] ip6t_srh: unknown srh match flags 4001 [ 102.563675][ T6643] netlink: 'syz.4.197': attribute type 1 has an invalid length. [ 102.564681][ T6636] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 102.573760][ T6643] netlink: 224 bytes leftover after parsing attributes in process `syz.4.197'. [ 102.935820][ T6649] netlink: 'syz.0.202': attribute type 1 has an invalid length. [ 103.465706][ T6679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.211'. [ 103.971771][ T6711] netlink: 16 bytes leftover after parsing attributes in process `syz.0.216'. [ 104.417110][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'. [ 105.070739][ T6764] tipc: Started in network mode [ 105.083055][ T6764] tipc: Node identity d652e3ec905, cluster identity 4711 [ 105.113496][ T6764] tipc: Enabled bearer , priority 0 [ 105.161171][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.233'. [ 105.178936][ T6772] tc_dump_action: action bad kind [ 105.215152][ T6766] tipc: Disabling bearer [ 105.240229][ T29] audit: type=1107 audit(1734788840.426:2): pid=6776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 105.508712][ T6781] veth0_vlan: left promiscuous mode [ 105.629726][ T6781] veth0_vlan: entered promiscuous mode [ 106.355376][ T6799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.241'. [ 106.567111][ T6803] Only authenc() type AEADs are supported by ESSIV [ 106.691822][ T6805] netlink: 36 bytes leftover after parsing attributes in process `syz.0.242'. [ 108.189659][ T6808] netlink: 168 bytes leftover after parsing attributes in process `syz.0.242'. [ 108.406213][ T6812] netlink: 'syz.4.247': attribute type 13 has an invalid length. [ 108.452637][ T6812] veth0_macvtap: left promiscuous mode [ 108.473016][ T6812] macvtap0: entered allmulticast mode [ 108.520283][ T6812] macvtap0: refused to change device tx_queue_len [ 108.572536][ T6823] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 108.777683][ T6782] infiniband syz1: set down [ 108.786219][ T6831] openvswitch: netlink: IP tunnel dst address not specified [ 108.809259][ T6782] infiniband syz1: added ipvlan1 [ 108.820774][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 108.836559][ T6782] syz1: rxe_create_cq: returned err = -12 [ 108.850453][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 108.860201][ T6782] infiniband syz1: Couldn't create ib_mad CQ [ 108.869655][ T6782] infiniband syz1: Couldn't open port 1 [ 108.915748][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 108.979462][ T6782] RDS/IB: syz1: added [ 108.989444][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 109.006241][ T6782] smc: adding ib device syz1 with port count 1 [ 109.013448][ T6782] smc: ib device syz1 port 1 has pnetid [ 109.035201][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 109.078227][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 109.174527][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 109.184086][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 109.251754][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 110.616203][ T6885] syz.0.265[6885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.616319][ T6885] syz.0.265[6885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.632337][ T6885] syz.0.265[6885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.716350][ T6890] xt_time: unknown flags 0x4 [ 111.192798][ T6909] ax25_connect(): syz.4.274 uses autobind, please contact jreuter@yaina.de [ 111.555534][ T6927] erspan0: entered promiscuous mode [ 111.568161][ T6927] vlan2: entered promiscuous mode [ 111.868477][ T6936] vlan2: entered allmulticast mode [ 111.887983][ T6936] bond0: entered allmulticast mode [ 111.897422][ T6936] bond_slave_0: entered allmulticast mode [ 111.934395][ T6936] bond_slave_1: entered allmulticast mode [ 112.003464][ T6936] bond0: left allmulticast mode [ 112.021674][ T6936] bond_slave_0: left allmulticast mode [ 112.029768][ T6936] bond_slave_1: left allmulticast mode [ 112.040736][ T6951] netlink: 'syz.1.287': attribute type 7 has an invalid length. [ 112.049709][ T6951] netlink: 'syz.1.287': attribute type 8 has an invalid length. [ 112.082748][ T6947] netlink: 'syz.3.286': attribute type 4 has an invalid length. [ 112.388078][ T6959] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 112.577590][ T6973] netlink: 'syz.0.294': attribute type 1 has an invalid length. [ 113.106058][ T6994] bond0: option resend_igmp: invalid value (7540) [ 113.142363][ T6994] bond0: option resend_igmp: allowed values 0 - 255 [ 113.287912][ T7000] __nla_validate_parse: 129 callbacks suppressed [ 113.287937][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.304'. [ 113.715417][ T7021] veth1_macvtap: left promiscuous mode [ 113.727780][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.309'. [ 114.032286][ T7035] netlink: 'syz.3.317': attribute type 1 has an invalid length. [ 114.041884][ T7034] xt_hashlimit: size too large, truncated to 1048576 [ 114.078770][ T7035] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.086611][ T5883] IPVS: starting estimator thread 0... [ 114.187760][ T7035] bond1: (slave veth3): Enslaving as an active interface with a down link [ 114.196762][ T7040] IPVS: using max 21 ests per chain, 50400 per kthread [ 114.239899][ T7049] netlink: 14 bytes leftover after parsing attributes in process `syz.1.319'. [ 114.272646][ T7054] ax25_connect(): syz.1.319 uses autobind, please contact jreuter@yaina.de [ 114.319127][ T7043] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.377286][ T7044] bond1: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 114.418554][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.320'. [ 115.236087][ T7043] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.505184][ T7063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.322'. [ 115.546381][ T7043] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.082776][ T7043] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.085775][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.329'. [ 116.149975][ T7089] netlink: 16 bytes leftover after parsing attributes in process `syz.1.329'. [ 116.194625][ T7095] Bluetooth: MGMT ver 1.23 [ 116.208512][ T7095] netlink: 76 bytes leftover after parsing attributes in process `syz.0.332'. [ 116.301374][ T7098] netlink: 80 bytes leftover after parsing attributes in process `syz.0.332'. [ 116.355312][ T7043] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.419772][ T7043] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.449143][ T7043] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.468238][ T7043] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.734770][ T7115] netlink: 'syz.4.338': attribute type 1 has an invalid length. [ 116.742941][ T7115] netlink: 56 bytes leftover after parsing attributes in process `syz.4.338'. [ 118.392901][ T7194] netlink: 'syz.2.358': attribute type 1 has an invalid length. [ 118.457741][ T7194] bond3: entered allmulticast mode [ 118.466905][ T7194] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.527041][ T7194] bond2: (slave bond3): making interface the new active one [ 118.536971][ T7194] bond2: (slave bond3): Enslaving as an active interface with an up link [ 118.545569][ T7200] __nla_validate_parse: 4 callbacks suppressed [ 118.545597][ T7200] netlink: 28 bytes leftover after parsing attributes in process `syz.2.358'. [ 118.607942][ T7200] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.762986][ T7214] netlink: 36 bytes leftover after parsing attributes in process `syz.0.363'. [ 119.159520][ T7226] SET target dimension over the limit! [ 119.206967][ T7226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.368'. [ 119.348092][ T7236] netlink: 'syz.2.373': attribute type 1 has an invalid length. [ 119.396793][ T7236] 8021q: adding VLAN 0 to HW filter on device bond4 [ 119.470098][ T7241] gretap1: entered promiscuous mode [ 119.490525][ T7241] bond4: (slave gretap1): making interface the new active one [ 119.503192][ T7241] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 119.646197][ T7249] GUP no longer grows the stack in syz.4.371 (7249): 20003000-2000a000 (20001000) [ 119.696291][ T7249] CPU: 1 UID: 0 PID: 7249 Comm: syz.4.371 Not tainted 6.13.0-rc3-syzkaller-00154-g30b981796b94 #0 [ 119.707529][ T7249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 119.718193][ T7249] Call Trace: [ 119.721539][ T7249] [ 119.724786][ T7249] dump_stack_lvl+0x241/0x360 [ 119.729667][ T7249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.735310][ T7249] ? __pfx__printk+0x10/0x10 [ 119.740148][ T7249] ? find_vma+0xf9/0x170 [ 119.744493][ T7249] ? vma_is_secretmem+0xd/0x50 [ 119.749685][ T7249] ? check_vma_flags+0x52b/0x5a0 [ 119.754895][ T7249] __get_user_pages+0x4385/0x49e0 [ 119.760000][ T7249] ? 0xffffffffa00038c0 [ 119.764292][ T7249] ? __pfx___get_user_pages+0x10/0x10 [ 119.769756][ T7249] __gup_longterm_locked+0x49a/0x17f0 [ 119.775224][ T7249] ? __pfx___might_resched+0x10/0x10 [ 119.780595][ T7249] ? __pfx___gup_longterm_locked+0x10/0x10 [ 119.786551][ T7249] ? down_read+0x82b/0xa40 [ 119.791179][ T7249] ? is_valid_gup_args+0x124/0x200 [ 119.796361][ T7249] pin_user_pages+0x137/0x1f0 [ 119.801264][ T7249] ? __pfx_pin_user_pages+0x10/0x10 [ 119.806543][ T7249] ? trace_kmalloc+0x1f/0xd0 [ 119.811197][ T7249] xdp_umem_create+0x978/0xf30 [ 119.816142][ T7249] xsk_setsockopt+0x732/0x950 [ 119.821074][ T7249] ? __pfx_xsk_setsockopt+0x10/0x10 [ 119.827054][ T7249] ? __pfx_lock_acquire+0x10/0x10 [ 119.832170][ T7249] ? aa_sock_opt_perm+0x79/0x120 [ 119.837573][ T7249] ? __pfx_xsk_setsockopt+0x10/0x10 [ 119.842889][ T7249] do_sock_setsockopt+0x3af/0x720 [ 119.848084][ T7249] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 119.853700][ T7249] ? __fget_files+0x395/0x410 [ 119.858723][ T7249] ? __fget_files+0x2a/0x410 [ 119.863497][ T7249] __x64_sys_setsockopt+0x1ee/0x280 [ 119.868780][ T7249] do_syscall_64+0xf3/0x230 [ 119.873372][ T7249] ? clear_bhb_loop+0x35/0x90 [ 119.878391][ T7249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.884483][ T7249] RIP: 0033:0x7fabb4185d29 [ 119.888956][ T7249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.909322][ T7249] RSP: 002b:00007fabb4f5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 119.917895][ T7249] RAX: ffffffffffffffda RBX: 00007fabb4376080 RCX: 00007fabb4185d29 [ 119.926033][ T7249] RDX: 0000000000000004 RSI: 000000000000011b RDI: 000000000000000a [ 119.934077][ T7249] RBP: 00007fabb4201aa8 R08: 000000000000001c R09: 0000000000000000 [ 119.942216][ T7249] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 119.950331][ T7249] R13: 0000000000000000 R14: 00007fabb4376080 R15: 00007ffd4d6230b8 [ 119.958497][ T7249] [ 119.974243][ T7249] vxcan1: tx address claim with dest, not broadcast [ 119.992794][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'. [ 120.034338][ T7257] netlink: 7 bytes leftover after parsing attributes in process `syz.1.378'. [ 120.157110][ T7273] ipt_ECN: cannot use operation on non-tcp rule [ 120.345310][ T7278] netlink: 'syz.1.383': attribute type 1 has an invalid length. [ 120.370732][ T7278] netlink: 'syz.1.383': attribute type 8 has an invalid length. [ 120.393308][ T7278] netlink: 134664 bytes leftover after parsing attributes in process `syz.1.383'. [ 120.515251][ T7284] netlink: 'syz.2.384': attribute type 4 has an invalid length. [ 120.725740][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.386'. [ 120.735081][ T7291] netlink: 20 bytes leftover after parsing attributes in process `syz.4.387'. [ 120.820085][ T7299] netlink: 'syz.3.390': attribute type 10 has an invalid length. [ 120.894639][ T7299] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 121.003986][ T7306] netlink: 'syz.0.391': attribute type 10 has an invalid length. [ 121.229825][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.393'. [ 121.294722][ T7324] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.397'. [ 121.376850][ T7328] netlink: 'syz.2.398': attribute type 3 has an invalid length. [ 121.426060][ T7324] netlink: 'syz.4.397': attribute type 1 has an invalid length. [ 121.440625][ T7326] netlink: 'syz.0.396': attribute type 4 has an invalid length. [ 121.493594][ T7335] netlink: 'syz.0.396': attribute type 4 has an invalid length. [ 121.605717][ T7324] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.755568][ T7334] bond1: (slave gretap1): making interface the new active one [ 121.805206][ T7334] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 121.830088][ T7344] netem: change failed [ 122.005689][ T7351] xt_CT: No such helper "syz1" [ 122.156102][ T7361] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 122.170149][ T7361] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 122.173528][ T7357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.310781][ T7367] tun0: tun_chr_ioctl cmd 1074025681 [ 122.475928][ T7377] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 123.026202][ T7400] veth0: entered promiscuous mode [ 123.042703][ T7398] veth0: left promiscuous mode [ 133.128141][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.135344][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.673834][ T7414] pim6reg: entered allmulticast mode [ 144.677302][ T7412] __nla_validate_parse: 7 callbacks suppressed [ 144.677340][ T7412] netlink: 44 bytes leftover after parsing attributes in process `syz.2.421'. [ 144.686796][ T7415] validate_nla: 1 callbacks suppressed [ 144.686817][ T7415] netlink: 'syz.0.419': attribute type 1 has an invalid length. [ 144.769016][ T7423] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20002 [ 144.904627][ T7412] netlink: 24 bytes leftover after parsing attributes in process `syz.2.421'. [ 145.085004][ T7437] netlink: 'syz.4.426': attribute type 30 has an invalid length. [ 145.184428][ T7444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.282827][ T7450] netlink: 'syz.1.429': attribute type 4 has an invalid length. [ 145.298551][ T7450] netlink: 17 bytes leftover after parsing attributes in process `syz.1.429'. [ 145.431808][ T7467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.464460][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 145.515411][ T7467] batadv_slave_1: entered promiscuous mode [ 145.540817][ T7467] batadv_slave_1: entered allmulticast mode [ 145.572687][ T7469] netlink: 40 bytes leftover after parsing attributes in process `syz.3.433'. [ 146.040482][ T7497] dvmrp0: left allmulticast mode [ 146.049725][ T7500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.441'. [ 146.337635][ T7512] dvmrp1: entered allmulticast mode [ 146.346380][ T7482] tipc: MTU too low for tipc bearer [ 146.381492][ T7517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.447'. [ 146.465317][ T7482] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 146.570335][ T7528] warning: `syz.4.450' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 146.600276][ T7528] netlink: 'syz.4.450': attribute type 27 has an invalid length. [ 147.247784][ T7561] can: request_module (can-proto-0) failed. [ 147.285828][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.459'. [ 147.295408][ T7569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.312621][ T7569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.402255][ T7571] C: renamed from lo [ 147.427455][ T7571] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 147.813437][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.465'. [ 147.848445][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.465'. [ 148.263996][ T7617] team0: entered promiscuous mode [ 148.288923][ T7617] team_slave_0: entered promiscuous mode [ 148.314304][ T7617] team_slave_1: entered promiscuous mode [ 148.338039][ T7617] batadv_slave_1: entered promiscuous mode [ 148.660189][ T7621] netlink: 'syz.3.479': attribute type 12 has an invalid length. [ 148.740252][ T7637] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 149.121919][ T7655] netlink: 'syz.0.487': attribute type 12 has an invalid length. [ 149.375442][ T7664] batadv_slave_1: default FDB implementation only supports local addresses [ 149.455524][ T7667] openvswitch: netlink: Message has 1 unknown bytes. [ 149.746464][ T7677] __nla_validate_parse: 2 callbacks suppressed [ 149.746486][ T7677] netlink: 16 bytes leftover after parsing attributes in process `syz.3.491'. [ 150.180850][ T7697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.494'. [ 150.828879][ T7714] veth3: entered allmulticast mode [ 150.850322][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 150.915054][ T7721] netlink: 20 bytes leftover after parsing attributes in process `syz.2.500'. [ 151.195633][ T7721] raw_sendmsg: syz.2.500 forgot to set AF_INET. Fix it! [ 151.344032][ T7721] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.351354][ T7721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.359867][ T7721] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.367160][ T7721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.417254][ T7721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.602589][ T7719] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 151.652930][ T7719] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 152.099591][ T7758] xt_TCPMSS: Only works on TCP SYN packets [ 152.387733][ T7769] netlink: 'syz.0.511': attribute type 3 has an invalid length. [ 152.781507][ T7790] netlink: 'syz.0.514': attribute type 46 has an invalid length. [ 152.821273][ T7790] : renamed from ip_vti0 (while UP) [ 153.965786][ T7847] xt_hashlimit: invalid rate [ 154.363105][ T7873] sctp: [Deprecated]: syz.3.529 (pid 7873) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.363105][ T7873] Use struct sctp_sack_info instead [ 154.453206][ T7875] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 154.754015][ T7887] xt_l2tp: v2 doesn't support IP mode [ 155.065573][ T7908] nbd: must specify a device to reconfigure [ 155.453058][ T7926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.544'. [ 155.487488][ T7926] netlink: 'syz.2.544': attribute type 8 has an invalid length. [ 155.507908][ T7926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.544'. [ 155.545492][ T7932] netlink: 76 bytes leftover after parsing attributes in process `syz.2.544'. [ 155.596271][ T7935] netlink: 156 bytes leftover after parsing attributes in process `syz.4.546'. [ 155.730101][ T7935] netlink: 16 bytes leftover after parsing attributes in process `syz.4.546'. [ 155.804810][ T7945] trusted_key: syz.0.547 sent an empty control message without MSG_MORE. [ 156.118042][ T7958] geneve2: entered promiscuous mode [ 156.134959][ T7958] geneve2: entered allmulticast mode [ 156.163971][ T7956] xt_CT: No such helper "snmp" [ 156.212216][ T7957] xt_CT: No such helper "snmp" [ 157.092161][ T8011] netlink: 'syz.1.562': attribute type 4 has an invalid length. [ 157.126001][ T8011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.562'. [ 157.266412][ T8018] netlink: 56 bytes leftover after parsing attributes in process `syz.4.564'. [ 157.305430][ T8018] netlink: 48 bytes leftover after parsing attributes in process `syz.4.564'. [ 157.435416][ T8029] netlink: 80 bytes leftover after parsing attributes in process `syz.3.566'. [ 157.467672][ T8029] netlink: 80 bytes leftover after parsing attributes in process `syz.3.566'. [ 157.925309][ T8052] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.105426][ T8058] IPVS: set_ctl: invalid protocol: 50 172.30.1.5:20000 [ 158.121857][ T8062] ieee802154 phy0 wpan0: encryption failed: -22 [ 158.143320][ T8058] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20000 [ 158.171633][ T8058] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20000 [ 158.181021][ T8065] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 158.988510][ C0] vcan0: j1939_tp_rxtimer: 0xffff88814338e800: rx timeout, send abort [ 159.452752][ T8116] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 159.498025][ C0] vcan0: j1939_tp_rxtimer: 0xffff88814338e800: abort rx timeout. Force session deactivation [ 159.609330][ T8125] sctp: [Deprecated]: syz.4.588 (pid 8125) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.609330][ T8125] Use struct sctp_sack_info instead [ 159.921928][ T8143] netlink: 'syz.3.593': attribute type 1 has an invalid length. [ 160.283437][ T8162] vlan0: entered promiscuous mode [ 160.341836][ T8166] xt_policy: neither incoming nor outgoing policy selected [ 160.357687][ T8162] team0: Port device vlan0 added [ 160.428291][ T8166] netlink: 'syz.3.595': attribute type 21 has an invalid length. [ 160.460096][ T8166] netlink: 'syz.3.595': attribute type 11 has an invalid length. [ 160.648952][ T8186] netlink: 'syz.0.599': attribute type 7 has an invalid length. [ 160.760465][ T8193] __nla_validate_parse: 67 callbacks suppressed [ 160.760489][ T8193] netlink: 40 bytes leftover after parsing attributes in process `syz.2.601'. [ 160.821528][ T8187] netlink: 36 bytes leftover after parsing attributes in process `syz.1.600'. [ 160.903571][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.603'. [ 161.005423][ T8193] netlink: 40 bytes leftover after parsing attributes in process `syz.2.601'. [ 161.064708][ T8197] veth5: entered allmulticast mode [ 161.231755][ T8218] netlink: 'syz.4.607': attribute type 1 has an invalid length. [ 161.241945][ T8215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.605'. [ 161.267892][ T8215] netlink: 56 bytes leftover after parsing attributes in process `syz.2.605'. [ 161.302996][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.605'. [ 161.351632][ T8215] tipc: Started in network mode [ 161.360897][ T8215] tipc: Node identity ac14140f, cluster identity 4711 [ 161.375094][ T8215] tipc: New replicast peer: 255.255.255.255 [ 161.381649][ T8215] tipc: Enabled bearer , priority 10 [ 161.400061][ T8229] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.609'. [ 161.409572][ T8229] openvswitch: netlink: Unexpected mask (mask=4, allowed=10048) [ 161.419973][ T8229] netlink: 56 bytes leftover after parsing attributes in process `syz.1.609'. [ 161.451367][ T8233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.605'. [ 162.152026][ T8272] netlink: 'syz.2.620': attribute type 1 has an invalid length. [ 162.169366][ T8272] netlink: 'syz.2.620': attribute type 1 has an invalid length. [ 162.384918][ T25] tipc: Node number set to 2886997007 [ 162.555818][ T8285] xt_CT: No such helper "netbios-ns" [ 163.148158][ T8328] netlink: 'syz.3.635': attribute type 8 has an invalid length. [ 163.206771][ T8328] netlink: 'syz.3.635': attribute type 8 has an invalid length. [ 163.260989][ T8328] netlink: 'syz.3.635': attribute type 8 has an invalid length. [ 163.977005][ T8373] SET target dimension over the limit! [ 164.087749][ T8370] team0: Port device vlan0 removed [ 164.992858][ T8413] validate_nla: 13 callbacks suppressed [ 164.992881][ T8413] netlink: 'syz.1.664': attribute type 16 has an invalid length. [ 165.013799][ T8413] netlink: 'syz.1.664': attribute type 3 has an invalid length. [ 165.283966][ T8422] netlink: 'syz.1.666': attribute type 3 has an invalid length. [ 165.484560][ T8433] ip6t_srh: unknown srh match flags 4001 [ 165.622603][ T8435] team1: entered promiscuous mode [ 165.628596][ T8435] 8021q: adding VLAN 0 to HW filter on device team1 [ 165.885707][ T8450] netlink: 'syz.4.678': attribute type 2 has an invalid length. [ 166.047435][ T8461] __nla_validate_parse: 15 callbacks suppressed [ 166.047457][ T8461] netlink: 24 bytes leftover after parsing attributes in process `syz.0.681'. [ 166.319141][ T8476] netlink: 192 bytes leftover after parsing attributes in process `syz.2.686'. [ 166.417117][ T8480] xt_l2tp: v2 tid > 0xffff: 150994944 [ 166.568554][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 166.662182][ T8489] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 167.384529][ T8522] x_tables: duplicate underflow at hook 1 [ 167.930449][ T8556] wg1: entered promiscuous mode [ 168.644348][ T5143] Bluetooth: hci4: command 0x0405 tx timeout [ 168.690453][ T8603] syz.4.722[8603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.690577][ T8603] syz.4.722[8603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.712489][ T8605] netlink: 'syz.1.723': attribute type 15 has an invalid length. [ 168.739761][ T8603] syz.4.722[8603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.755440][ T8603] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 168.852985][ T8612] x_tables: duplicate underflow at hook 3 [ 169.019822][ T8617] netlink: 24 bytes leftover after parsing attributes in process `syz.3.727'. [ 169.936912][ T8654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.741'. [ 170.505319][ T8699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.751'. [ 171.626065][ T8770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.771'. [ 171.660882][ T8770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.771'. [ 171.680697][ T8771] vlan3: entered allmulticast mode [ 171.689432][ T8771] vlan1: entered allmulticast mode [ 171.705684][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.770'. [ 171.709571][ T8771] veth0_vlan: entered allmulticast mode [ 171.727855][ T8771] bridge0: port 3(vlan3) entered blocking state [ 171.734667][ T8771] bridge0: port 3(vlan3) entered disabled state [ 171.742746][ T8771] vlan3: entered promiscuous mode [ 171.748587][ T8771] vlan1: entered promiscuous mode [ 171.769792][ T8771] bridge0: port 3(vlan3) entered blocking state [ 171.776674][ T8771] bridge0: port 3(vlan3) entered forwarding state [ 171.833575][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 171.851301][ T8773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.772'. [ 171.875900][ T8782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.774'. [ 172.113608][ T8794] netlink: 'syz.2.778': attribute type 1 has an invalid length. [ 172.134560][ T8794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.778'. [ 172.148645][ T8797] Dead loop on virtual device ip6_vti0, fix it urgently! [ 172.162855][ T8800] netlink: 24 bytes leftover after parsing attributes in process `syz.3.781'. [ 172.222259][ T8803] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.401451][ T8813] netlink: 'syz.3.785': attribute type 49 has an invalid length. [ 172.451194][ T8811] netlink: 20 bytes leftover after parsing attributes in process `syz.0.784'. [ 172.492975][ T8811] netlink: 'syz.0.784': attribute type 1 has an invalid length. [ 172.502585][ T8811] netlink: 224 bytes leftover after parsing attributes in process `syz.0.784'. [ 172.929825][ T8848] netlink: 'syz.2.796': attribute type 2 has an invalid length. [ 172.967634][ T8849] tipc: Started in network mode [ 172.982943][ T8849] tipc: Node identity ac1414aa, cluster identity 4711 [ 172.995071][ T8849] tipc: Enabled bearer , priority 10 [ 173.094296][ T8857] IPVS: set_ctl: invalid protocol: 58 172.20.20.13:21 [ 173.112072][ T8855] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 173.532668][ T8886] netlink: 'syz.2.808': attribute type 2 has an invalid length. [ 173.564055][ T8886] netlink: 'syz.2.808': attribute type 1 has an invalid length. [ 173.668436][ T8890] ebt_limit: overflow, try lower: 0/0 [ 174.114292][ T7850] tipc: Node number set to 2886997162 [ 174.500184][ T8927] x_tables: unsorted entry at hook 3 [ 174.699029][ T8937] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.708490][ T8937] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.717355][ T8937] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.726773][ T8937] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.877799][ T8949] x_tables: duplicate underflow at hook 1 [ 175.228195][ T8968] netlink: 'syz.3.831': attribute type 1 has an invalid length. [ 175.284354][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 175.581158][ T8987] tunl0: entered promiscuous mode [ 175.590804][ T8987] netlink: 'syz.4.838': attribute type 3 has an invalid length. [ 176.321596][ T9012] netlink: 'syz.4.846': attribute type 10 has an invalid length. [ 176.366672][ T9012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.395464][ T9012] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 176.404717][ T9014] netlink: 'syz.3.847': attribute type 1 has an invalid length. [ 176.511808][ T6134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.530147][ T6134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.611325][ T9025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.917637][ T9039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.051328][ T9053] xt_nat: multiple ranges no longer supported [ 177.219765][ T9062] 8021q: adding VLAN 0 to HW filter on device bond6 [ 177.486237][ T9072] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 177.603688][ T5880] hid-generic 0005:07C0:0058.0002: item fetching failed at offset 0/1 [ 177.612906][ T5880] hid-generic 0005:07C0:0058.0002: probe with driver hid-generic failed with error -22 [ 177.684911][ T9090] SET target dimension over the limit! [ 177.869809][ T9094] __nla_validate_parse: 17 callbacks suppressed [ 177.869835][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.875'. [ 177.921959][ T9097] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.876'. [ 178.249511][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.879'. [ 178.269273][ T9103] netlink: 'syz.3.879': attribute type 30 has an invalid length. [ 178.313334][ T9108] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 178.493187][ T9103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.879'. [ 178.661262][ T9119] netlink: 24 bytes leftover after parsing attributes in process `syz.3.883'. [ 178.838618][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.884'. [ 179.062614][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.887'. [ 179.326259][ T9147] xt_bpf: check failed: parse error [ 179.405916][ T9151] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 179.612535][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.899'. [ 179.628769][ T9167] netlink: 20 bytes leftover after parsing attributes in process `syz.4.899'. [ 179.784730][ T9177] team0: Device is already in use. [ 179.872913][ T9180] 8021q: VLANs not supported on lo [ 179.894515][ T9180] netlink: 'syz.3.904': attribute type 1 has an invalid length. [ 179.902319][ T9180] netlink: 'syz.3.904': attribute type 1 has an invalid length. [ 179.929133][ T9184] netlink: 'syz.2.905': attribute type 4 has an invalid length. [ 180.063915][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.907'. [ 180.106656][ T9193] netlink: 'syz.1.906': attribute type 2 has an invalid length. [ 180.445242][ T9212] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 180.481709][ T9212] netlink: 'syz.1.912': attribute type 2 has an invalid length. [ 180.493767][ T9212] netlink: 'syz.1.912': attribute type 2 has an invalid length. [ 180.519176][ T9217] netlink: 'syz.0.914': attribute type 9 has an invalid length. [ 180.561315][ T9219] netlink: 'syz.0.914': attribute type 9 has an invalid length. [ 180.690094][ T9225] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 180.719331][ T9227] netlink: 'syz.4.916': attribute type 21 has an invalid length. [ 181.336598][ T9263] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (8) [ 181.892210][ T9296] sctp: [Deprecated]: syz.2.936 (pid 9296) Use of int in max_burst socket option deprecated. [ 181.892210][ T9296] Use struct sctp_assoc_value instead [ 183.153966][ T9337] __nla_validate_parse: 10 callbacks suppressed [ 183.153991][ T9337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.946'. [ 183.564710][ T9355] ip6gre1: entered allmulticast mode [ 183.946546][ T9372] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 184.173047][ T9376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.958'. [ 184.333559][ T9377] netlink: 'syz.2.958': attribute type 1 has an invalid length. [ 184.817452][ T9394] syz.4.962[9394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.817559][ T9394] syz.4.962[9394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.948933][ T9394] syz.4.962[9394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.303567][ T9403] netlink: 'syz.2.965': attribute type 2 has an invalid length. [ 185.915449][ T9420] xt_bpf: check failed: parse error [ 186.607056][ T9453] netlink: 'syz.0.978': attribute type 11 has an invalid length. [ 186.694588][ T9453] netlink: 224 bytes leftover after parsing attributes in process `syz.0.978'. [ 187.041960][ T9462] x_tables: duplicate entry at hook 1 [ 187.066915][ T9462] netlink: 4160 bytes leftover after parsing attributes in process `syz.3.980'. [ 187.551950][ T9484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.981'. [ 188.292843][ T9514] netlink: 'syz.2.990': attribute type 4 has an invalid length. [ 188.300913][ T9510] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 188.305467][ T9515] netlink: 'syz.2.990': attribute type 4 has an invalid length. [ 188.712794][ T9535] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.720637][ T9535] IPv6: NLM_F_CREATE should be set when creating new route [ 188.723516][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.995'. [ 188.727979][ T9535] IPv6: NLM_F_CREATE should be set when creating new route [ 188.751627][ T9536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.995'. [ 188.821184][ T9540] netlink: 56 bytes leftover after parsing attributes in process `syz.0.998'. [ 188.841157][ T9542] netlink: 56 bytes leftover after parsing attributes in process `syz.0.998'. [ 189.071478][ T9560] pim6reg: entered allmulticast mode [ 189.089973][ T9560] pim6reg: left allmulticast mode [ 189.521593][ T9582] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.1007'. [ 190.164899][ T9617] vlan0: entered promiscuous mode [ 190.188656][ T9617] team0: Port device vlan0 added [ 190.330610][ T9623] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1018'. [ 190.348985][ T9623] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1018'. [ 190.776261][ T9645] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1024'. [ 191.086425][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1030'. [ 191.105539][ T9660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1030'. [ 191.911661][ T9699] delete_channel: no stack [ 191.960079][ T9703] tipc: Enabling of bearer rejected, failed to enable media [ 192.093535][ T9707] netlink: ct family unspecified [ 192.113166][ T9707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.282205][ T9712] No such timeout policy "syz0" [ 192.830186][ T9743] openvswitch: netlink: Actions may not be safe on all matching packets [ 192.850496][ T9747] openvswitch: netlink: Actions may not be safe on all matching packets [ 193.343807][ T9770] netlink: 'syz.1.1073': attribute type 1 has an invalid length. [ 193.352462][ T9770] netlink: 'syz.1.1073': attribute type 2 has an invalid length. [ 193.364563][ T5880] IPVS: starting estimator thread 0... [ 193.371452][ T9766] netlink: 'syz.4.1071': attribute type 1 has an invalid length. [ 193.484427][ T9772] IPVS: using max 19 ests per chain, 45600 per kthread [ 193.615992][ T9786] veth1_to_team: entered promiscuous mode [ 193.768246][ T9785] veth1_to_team: left promiscuous mode [ 193.902544][ T9802] __nla_validate_parse: 14 callbacks suppressed [ 193.902565][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1083'. [ 194.401890][ T9825] gre2: entered promiscuous mode [ 194.409750][ T9825] gre2: entered allmulticast mode [ 194.456723][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1091'. [ 194.570429][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.578506][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.779332][ T9841] netlink: 'syz.2.1096': attribute type 2 has an invalid length. [ 194.788687][ T9841] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1096'. [ 194.975521][ T9851] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 195.055731][ T9851] bond3: entered promiscuous mode [ 195.064028][ T9851] bond3: entered allmulticast mode [ 195.072600][ T9851] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.136935][ T9857] xt_CT: No such helper "syz1" [ 195.302130][ T9868] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1103'. [ 195.687580][ T9888] netlink: 'syz.2.1110': attribute type 2 has an invalid length. [ 195.712070][ T9888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1110'. [ 195.858605][ T9902] syzkaller0: entered allmulticast mode [ 195.895840][ T9902] xt_recent: Unsupported userspace flags (00000042) [ 196.098471][ T9902] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1114'. [ 196.595293][ T9929] sctp: [Deprecated]: syz.2.1121 (pid 9929) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.595293][ T9929] Use struct sctp_sack_info instead [ 196.647270][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 196.890212][ T9948] ipt_REJECT: ECHOREPLY no longer supported. [ 197.291704][ T9974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1135'. [ 197.823907][ T9991] vlan2: entered promiscuous mode [ 197.996078][ T9966] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 198.016767][T10003] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20003 [ 198.039975][ T9966] sctp: [Deprecated]: syz.3.1132 (pid 9966) Use of struct sctp_assoc_value in delayed_ack socket option. [ 198.039975][ T9966] Use struct sctp_sack_info instead [ 198.202707][T10010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1147'. [ 198.570357][ T5880] hid-generic 0005:04F3:0058.0003: item fetching failed at offset 0/1 [ 198.630675][ T5880] hid-generic 0005:04F3:0058.0003: probe with driver hid-generic failed with error -22 [ 198.702128][T10038] sctp: [Deprecated]: syz.3.1152 (pid 10038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 198.702128][T10038] Use struct sctp_sack_info instead [ 198.899336][T10050] netlink: 'syz.0.1156': attribute type 7 has an invalid length. [ 198.918747][T10051] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 198.934403][T10050] netlink: 'syz.0.1156': attribute type 8 has an invalid length. [ 198.943491][T10050] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1156'. [ 198.993832][T10053] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1158'. [ 199.015884][T10051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1157'. [ 199.026032][T10054] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1158'. [ 199.394969][T10076] netlink: 'syz.4.1164': attribute type 10 has an invalid length. [ 199.497439][T10076] team0: Device veth1_macvtap failed to register rx_handler [ 200.053318][T10113] netlink: 'syz.3.1174': attribute type 1 has an invalid length. [ 200.180256][T10113] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 200.228044][ T11] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 200.232387][T10113] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.291822][T10122] netlink: 'syz.3.1174': attribute type 1 has an invalid length. [ 200.365309][ T35] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 200.628224][T10135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1183'. [ 200.866415][T10154] IPVS: sync thread started: state = MASTER, mcast_ifn = erspan0, syncid = 3, id = 0 [ 200.876996][T10145] tipc: Enabling of bearer rejected, failed to enable media [ 200.908147][T10157] xt_bpf: check failed: parse error [ 200.945914][T10147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1189'. [ 201.012277][T10147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1189'. [ 201.058449][T10147] 8021q: adding VLAN 0 to HW filter on device bond3 [ 201.263428][T10170] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1196'. [ 201.282931][T10170] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1196'. [ 201.663252][T10193] netlink: 'syz.4.1204': attribute type 4 has an invalid length. [ 201.770811][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 201.777519][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 201.783636][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 202.335872][T10239] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1218'. [ 203.643061][T10314] netlink: 'syz.4.1241': attribute type 10 has an invalid length. [ 203.684871][T10314] sctp: [Deprecated]: syz.4.1241 (pid 10314) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.684871][T10314] Use struct sctp_sack_info instead [ 204.085469][T10341] veth9: entered allmulticast mode [ 204.343166][T10356] __nla_validate_parse: 6 callbacks suppressed [ 204.343187][T10356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1253'. [ 204.497823][T10364] IPVS: set_ctl: invalid protocol: 86 0.0.0.0:20001 [ 204.537921][T10366] xt_CT: No such helper "snmp_trap" [ 204.619704][T10373] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1258'. [ 204.630545][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1258'. [ 204.714245][T10377] netlink: 'syz.0.1260': attribute type 2 has an invalid length. [ 204.734335][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1260'. [ 204.852721][T10382] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1262'. [ 204.863800][T10383] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1262'. [ 204.893298][T10380] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1261'. [ 205.052308][T10386] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 205.169245][T10393] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20004 [ 205.175808][T10400] netlink: 'syz.3.1269': attribute type 11 has an invalid length. [ 205.220840][T10401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1269'. [ 205.273591][T10405] netlink: 'syz.0.1271': attribute type 18 has an invalid length. [ 205.283723][T10406] netlink: 'syz.0.1271': attribute type 18 has an invalid length. [ 205.305958][T10405] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.314853][T10405] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.323756][T10405] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.332672][T10405] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.369190][T10409] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 206.165482][T10448] veth5: entered allmulticast mode [ 206.561837][T10476] xt_CT: No such helper "pptp" [ 206.687328][T10486] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 206.725453][T10488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1297'. [ 206.831833][T10493] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1299'. [ 207.001872][T10495] 8021q: adding VLAN 0 to HW filter on device bond5 [ 207.020150][T10495] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 207.451829][T10521] Cannot find add_set index 0 as target [ 207.470327][T10521] Cannot find add_set index 0 as target [ 207.494649][T10521] Cannot find add_set index 0 as target [ 207.517329][T10521] Cannot find add_set index 0 as target [ 207.538357][T10521] Cannot find add_set index 0 as target [ 207.564519][T10521] Cannot find add_set index 0 as target [ 207.577219][T10521] Cannot find add_set index 0 as target [ 207.590235][T10521] Cannot find add_set index 0 as target [ 207.613005][T10521] Cannot find add_set index 0 as target [ 207.653841][T10521] Cannot find add_set index 0 as target [ 208.785392][T10597] netlink: 'syz.1.1338': attribute type 26 has an invalid length. [ 209.689176][T10659] netlink: 'syz.1.1355': attribute type 10 has an invalid length. [ 209.751696][T10659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.795419][T10659] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 209.855152][T10666] netlink: 'syz.0.1357': attribute type 1 has an invalid length. [ 210.545307][T10700] __nla_validate_parse: 8 callbacks suppressed [ 210.545331][T10700] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1368'. [ 210.571836][T10691] syz.0.1366 uses old SIOCAX25GETINFO [ 210.594473][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1368'. [ 210.622751][T10700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1368'. [ 211.074869][T10735] syzkaller1: entered promiscuous mode [ 211.096181][T10735] syzkaller1: entered allmulticast mode [ 211.132398][T10739] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1377'. [ 211.171623][T10739] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1377'. [ 211.509149][T10753] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1381'. [ 211.609652][T10760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1385'. [ 211.831924][T10770] can: request_module (can-proto-5) failed. [ 211.845259][T10770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1390'. [ 211.862487][T10770] netlink: 'syz.0.1390': attribute type 11 has an invalid length. [ 211.951254][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1390'. [ 211.974698][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1390'. [ 212.109140][T10774] syzkaller0: entered promiscuous mode [ 212.119938][T10774] syzkaller0: entered allmulticast mode [ 212.227533][T10798] netlink: 'syz.2.1396': attribute type 41 has an invalid length. [ 212.391379][T10805] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 212.668536][T10799] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.676104][T10799] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.253773][T10799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.305286][T10799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.724191][T10799] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.733127][T10799] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.744510][T10799] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.761699][T10799] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.919911][T10799] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.929369][T10799] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.938448][T10799] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.947465][T10799] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.927178][T10829] netlink: 'syz.2.1404': attribute type 10 has an invalid length. [ 215.989504][T10831] __nla_validate_parse: 4 callbacks suppressed [ 215.989527][T10831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1405'. [ 216.023428][T10834] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1405'. [ 216.092258][T10836] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1408'. [ 216.105566][T10836] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1408'. [ 216.602212][T10867] FAULT_INJECTION: forcing a failure. [ 216.602212][T10867] name failslab, interval 1, probability 0, space 0, times 1 [ 216.640459][T10867] CPU: 1 UID: 0 PID: 10867 Comm: syz.0.1419 Not tainted 6.13.0-rc3-syzkaller-00154-g30b981796b94 #0 [ 216.651305][T10867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 216.661418][T10867] Call Trace: [ 216.664730][T10867] [ 216.667688][T10867] dump_stack_lvl+0x241/0x360 [ 216.672424][T10867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.677669][T10867] ? __pfx__printk+0x10/0x10 [ 216.682310][T10867] ? fs_reclaim_acquire+0x93/0x130 [ 216.687466][T10867] ? __pfx___might_resched+0x10/0x10 [ 216.692802][T10867] should_fail_ex+0x3b0/0x4e0 [ 216.697532][T10867] should_failslab+0xac/0x100 [ 216.702252][T10867] __kmalloc_noprof+0xdd/0x4c0 [ 216.707055][T10867] ? kstrtouint_from_user+0x128/0x190 [ 216.712465][T10867] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 216.718235][T10867] tomoyo_realpath_from_path+0xcf/0x5e0 [ 216.723850][T10867] tomoyo_path_number_perm+0x236/0x860 [ 216.729387][T10867] ? __lock_acquire+0x1397/0x2100 [ 216.732193][T10872] ebt_among: dst integrity fail: 200 [ 216.734437][T10867] ? tomoyo_path_number_perm+0x206/0x860 [ 216.734498][T10867] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 216.734573][T10867] ? __fget_files+0x2a/0x410 [ 216.756103][T10867] ? __fget_files+0x2a/0x410 [ 216.760750][T10867] security_file_ioctl+0xc6/0x2a0 [ 216.765827][T10867] __se_sys_ioctl+0x46/0x170 [ 216.770472][T10867] do_syscall_64+0xf3/0x230 [ 216.775040][T10867] ? clear_bhb_loop+0x35/0x90 [ 216.779759][T10867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.785716][T10867] RIP: 0033:0x7f175df85d29 [ 216.790176][T10867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.809828][T10867] RSP: 002b:00007f175ed39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.818301][T10867] RAX: ffffffffffffffda RBX: 00007f175e175fa0 RCX: 00007f175df85d29 [ 216.826314][T10867] RDX: 0000000020000040 RSI: 0000000000008946 RDI: 0000000000000003 [ 216.834327][T10867] RBP: 00007f175ed39090 R08: 0000000000000000 R09: 0000000000000000 [ 216.842344][T10867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.850354][T10867] R13: 0000000000000000 R14: 00007f175e175fa0 R15: 00007ffe2a625308 [ 216.858390][T10867] [ 216.907512][T10867] ERROR: Out of memory at tomoyo_realpath_from_path. [ 217.278855][T10905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1431'. [ 217.461134][T10907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1430'. [ 217.571692][T10915] xt_CONNSECMARK: invalid mode: 0 [ 217.636338][T10917] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 217.698790][T10921] tipc: Started in network mode [ 217.703722][T10921] tipc: Node identity 1, cluster identity 4711 [ 217.722828][T10921] tipc: Node number set to 1 [ 217.941526][T10934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1441'. [ 217.971123][T10934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1441'. [ 218.247368][T10944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1444'. [ 218.306311][T10926] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1438'. [ 218.873232][T10972] netlink: 'syz.4.1453': attribute type 5 has an invalid length. [ 218.948944][T10974] vlan2: entered allmulticast mode [ 219.381012][T10987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.399781][T10987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.427655][T10987] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 219.450844][T10987] bond0 (unregistering): Released all slaves [ 220.347704][T11040] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 220.358588][T11042] netlink: 'syz.4.1473': attribute type 20 has an invalid length. [ 220.911837][T11067] netlink: 'syz.1.1484': attribute type 10 has an invalid length. [ 220.931467][T11069] netlink: 'syz.3.1482': attribute type 10 has an invalid length. [ 220.955260][T11069] bridge0: port 3(wlan1) entered blocking state [ 220.971951][T11069] bridge0: port 3(wlan1) entered disabled state [ 220.980574][T11069] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 220.989707][T11069] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 220.998647][T11071] __nla_validate_parse: 11 callbacks suppressed [ 220.998668][T11071] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1483'. [ 221.508036][T11101] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1490'. [ 221.630413][T11101] tipc: Enabled bearer , priority 10 [ 221.818840][T11123] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1496'. [ 221.828631][T11123] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1496'. [ 221.915448][T11128] netlink: 'syz.4.1495': attribute type 11 has an invalid length. [ 221.971842][T11128] netlink: 'syz.4.1495': attribute type 11 has an invalid length. [ 221.981988][T11134] sctp: [Deprecated]: syz.2.1497 (pid 11134) Use of int in maxseg socket option. [ 221.981988][T11134] Use struct sctp_assoc_value instead [ 222.064323][T11128] netlink: 'syz.4.1495': attribute type 11 has an invalid length. [ 222.113088][T11128] netlink: 'syz.4.1495': attribute type 11 has an invalid length. [ 222.251272][T11128] netlink: 'syz.4.1495': attribute type 11 has an invalid length. [ 222.326090][T11128] netlink: 'syz.4.1495': attribute type 11 has an invalid length. [ 222.349240][T11128] netlink: 'syz.4.1495': attribute type 11 has an invalid length. [ 222.465423][T11128] netlink: 'syz.4.1495': attribute type 11 has an invalid length. [ 222.477486][T11152] netlink: 'syz.2.1501': attribute type 62 has an invalid length. [ 222.500315][T11155] pimreg: entered allmulticast mode [ 222.506052][T11152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1501'. [ 222.508951][T11128] netlink: 'syz.4.1495': attribute type 11 has an invalid length. [ 222.516206][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1501'. [ 222.712353][T11155] pimreg: left allmulticast mode [ 222.757573][ T25] tipc: Node number set to 1174594540 [ 223.184452][T11175] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1509'. [ 223.200490][T11176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1508'. [ 223.230438][T11176] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1508'. [ 223.243682][T11176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1508'. [ 223.693887][T11209] syzkaller1: entered promiscuous mode [ 223.702094][T11209] syzkaller1: entered allmulticast mode [ 224.424603][T11241] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 224.587634][T11257] tipc: Enabling of bearer rejected, failed to enable media [ 224.643144][T11253] netlink: zone id is out of range [ 224.675348][T11253] netlink: zone id is out of range [ 224.688113][T11253] netlink: zone id is out of range [ 224.693289][T11253] netlink: zone id is out of range [ 224.712111][T11253] netlink: zone id is out of range [ 224.722324][T11253] netlink: zone id is out of range [ 224.735496][T11260] xt_NFQUEUE: number of total queues is 0 [ 224.742538][T11253] netlink: zone id is out of range [ 224.762571][T11253] netlink: zone id is out of range [ 224.774234][T11253] netlink: zone id is out of range [ 224.784515][T11253] netlink: zone id is out of range [ 225.000338][T11276] delete_channel: no stack [ 225.387076][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027c0d000: rx timeout, send abort [ 225.395482][ C0] vcan0: j1939_tp_rxtimer: 0xffff888027c0c000: rx timeout, send abort [ 225.404026][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888027c0d000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 225.420026][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888027c0c000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 226.236314][T11345] __nla_validate_parse: 11 callbacks suppressed [ 226.236344][T11345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1564'. [ 226.777111][T11366] tipc: Invalid UDP bearer configuration [ 226.777159][T11366] tipc: Enabling of bearer rejected, failed to enable media [ 226.818983][T11366] dvmrp16: entered allmulticast mode [ 226.929484][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 226.940091][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 226.949007][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 226.958730][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 226.967707][ T5143] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 226.980640][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 227.002451][T11375] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1578'. [ 227.021761][T11375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1578'. [ 227.227406][T11381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1580'. [ 227.231345][T11382] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1579'. [ 227.265912][T11381] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1580'. [ 227.287071][T11382] unsupported nlmsg_type 40 [ 227.297224][T11381] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1580'. [ 227.732936][T11369] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 227.905893][T11370] chnl_net:caif_netlink_parms(): no params data found [ 227.915096][T11397] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1585'. [ 227.930707][T11389] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1582'. [ 228.084684][T11402] xt_hashlimit: size too large, truncated to 1048576 [ 228.181325][T11370] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.194402][T11370] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.224765][T11370] bridge_slave_0: entered allmulticast mode [ 228.232034][T11370] bridge_slave_0: entered promiscuous mode [ 228.260071][T11370] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.287625][T11370] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.309710][T11370] bridge_slave_1: entered allmulticast mode [ 228.326177][T11370] bridge_slave_1: entered promiscuous mode [ 228.413314][T11370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.464873][T11370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.593087][T11370] team0: Port device team_slave_0 added [ 228.631585][T11370] team0: Port device team_slave_1 added [ 228.715863][T11370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.733123][T11370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.800322][T11370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.878213][T11370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.889065][T11370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.953530][T11370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.044386][ T5843] Bluetooth: hci0: command 0x0c20 tx timeout [ 229.146623][T11370] hsr_slave_0: entered promiscuous mode [ 229.182216][T11370] hsr_slave_1: entered promiscuous mode [ 229.234243][T11370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.241877][T11370] Cannot create hsr debugfs directory [ 229.653290][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1600'. [ 229.752525][ T6132] smc: removing ib device syz1 [ 229.953556][T11459] bridge0: port 4(vlan0) entered blocking state [ 229.974317][T11459] bridge0: port 4(vlan0) entered disabled state [ 229.984453][T11459] vlan0: entered allmulticast mode [ 230.005467][T11459] vlan0: left allmulticast mode [ 230.058970][ T25] ================================================================== [ 230.067093][ T25] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 230.075887][ T25] Read of size 8 at addr ffff88805d00c2e8 by task kworker/1:0/25 [ 230.083625][ T25] [ 230.085994][ T25] CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Not tainted 6.13.0-rc3-syzkaller-00154-g30b981796b94 #0 [ 230.096593][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 230.106655][ T25] Workqueue: events smc_ib_port_event_work [ 230.112479][ T25] Call Trace: [ 230.115779][ T25] [ 230.118713][ T25] dump_stack_lvl+0x241/0x360 [ 230.123403][ T25] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.128622][ T25] ? __pfx__printk+0x10/0x10 [ 230.133233][ T25] ? _printk+0xd5/0x120 [ 230.137399][ T25] ? __virt_addr_valid+0x183/0x530 [ 230.142521][ T25] ? __virt_addr_valid+0x183/0x530 [ 230.147645][ T25] print_report+0x169/0x550 [ 230.152157][ T25] ? __virt_addr_valid+0x183/0x530 [ 230.157277][ T25] ? __virt_addr_valid+0x183/0x530 [ 230.162419][ T25] ? __virt_addr_valid+0x45f/0x530 [ 230.167586][ T25] ? __phys_addr+0xba/0x170 [ 230.172152][ T25] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 230.178148][ T25] kasan_report+0x143/0x180 [ 230.182679][ T25] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 230.188681][ T25] __ethtool_get_link_ksettings+0x6e/0x190 [ 230.194504][ T25] ib_get_eth_speed+0x160/0x800 [ 230.199376][ T25] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 230.204822][ T25] ? rxe_query_port+0x4f/0x260 [ 230.209610][ T25] rxe_query_port+0x76/0x260 [ 230.214220][ T25] ib_query_port+0x166/0x7d0 [ 230.218836][ T25] smc_ib_port_event_work+0x14e/0xa50 [ 230.224314][ T25] ? process_scheduled_works+0x976/0x1840 [ 230.230047][ T25] process_scheduled_works+0xa66/0x1840 [ 230.235610][ T25] ? __pfx_process_scheduled_works+0x10/0x10 [ 230.241603][ T25] ? assign_work+0x364/0x3d0 [ 230.246202][ T25] worker_thread+0x870/0xd30 [ 230.250807][ T25] ? __kthread_parkme+0x169/0x1d0 [ 230.255840][ T25] ? __pfx_worker_thread+0x10/0x10 [ 230.260966][ T25] kthread+0x2f0/0x390 [ 230.265051][ T25] ? __pfx_worker_thread+0x10/0x10 [ 230.270178][ T25] ? __pfx_kthread+0x10/0x10 [ 230.274779][ T25] ret_from_fork+0x4b/0x80 [ 230.279200][ T25] ? __pfx_kthread+0x10/0x10 [ 230.283798][ T25] ret_from_fork_asm+0x1a/0x30 [ 230.288573][ T25] [ 230.291594][ T25] [ 230.293918][ T25] Allocated by task 5842: [ 230.298242][ T25] kasan_save_track+0x3f/0x80 [ 230.302925][ T25] __kasan_kmalloc+0x98/0xb0 [ 230.307522][ T25] __kmalloc_node_noprof+0x290/0x4d0 [ 230.312817][ T25] __kvmalloc_node_noprof+0x72/0x190 [ 230.318104][ T25] alloc_netdev_mqs+0xa4/0x1080 [ 230.322960][ T25] rtnl_create_link+0x2f9/0xc20 [ 230.327821][ T25] rtnl_newlink_create+0x210/0xa40 [ 230.332944][ T25] rtnl_newlink+0x1c7e/0x2210 [ 230.337630][ T25] rtnetlink_rcv_msg+0x791/0xcf0 [ 230.342578][ T25] netlink_rcv_skb+0x1e3/0x430 [ 230.347346][ T25] netlink_unicast+0x7f6/0x990 [ 230.352123][ T25] netlink_sendmsg+0x8e4/0xcb0 [ 230.356908][ T25] __sock_sendmsg+0x221/0x270 [ 230.361595][ T25] __sys_sendto+0x363/0x4c0 [ 230.366101][ T25] __x64_sys_sendto+0xde/0x100 [ 230.370867][ T25] do_syscall_64+0xf3/0x230 [ 230.375377][ T25] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.381295][ T25] [ 230.383618][ T25] Freed by task 11458: [ 230.387695][ T25] kasan_save_track+0x3f/0x80 [ 230.392376][ T25] kasan_save_free_info+0x40/0x50 [ 230.397411][ T25] __kasan_slab_free+0x59/0x70 [ 230.402176][ T25] kfree+0x196/0x430 [ 230.406078][ T25] device_release+0x99/0x1c0 [ 230.410683][ T25] kobject_put+0x22f/0x480 [ 230.415142][ T25] netdev_run_todo+0xe79/0x1000 [ 230.419999][ T25] rtnl_dellink+0x760/0x8d0 [ 230.424511][ T25] rtnetlink_rcv_msg+0x791/0xcf0 [ 230.429458][ T25] netlink_rcv_skb+0x1e3/0x430 [ 230.434224][ T25] netlink_unicast+0x7f6/0x990 [ 230.438994][ T25] netlink_sendmsg+0x8e4/0xcb0 [ 230.443760][ T25] __sock_sendmsg+0x221/0x270 [ 230.448447][ T25] ____sys_sendmsg+0x52a/0x7e0 [ 230.453217][ T25] __sys_sendmsg+0x269/0x350 [ 230.457810][ T25] do_syscall_64+0xf3/0x230 [ 230.462322][ T25] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.468225][ T25] [ 230.470550][ T25] The buggy address belongs to the object at ffff88805d00c000 [ 230.470550][ T25] which belongs to the cache kmalloc-cg-4k of size 4096 [ 230.484882][ T25] The buggy address is located 744 bytes inside of [ 230.484882][ T25] freed 4096-byte region [ffff88805d00c000, ffff88805d00d000) [ 230.498768][ T25] [ 230.501093][ T25] The buggy address belongs to the physical page: [ 230.507507][ T25] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5d008 [ 230.516268][ T25] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 230.524777][ T25] memcg:ffff888028e37d81 [ 230.529012][ T25] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 230.536650][ T25] page_type: f5(slab) [ 230.540634][ T25] raw: 00fff00000000040 ffff88801ac4f500 ffffea0001683400 dead000000000002 [ 230.549236][ T25] raw: 0000000000000000 0000000000040004 00000001f5000000 ffff888028e37d81 [ 230.557847][ T25] head: 00fff00000000040 ffff88801ac4f500 ffffea0001683400 dead000000000002 [ 230.566572][ T25] head: 0000000000000000 0000000000040004 00000001f5000000 ffff888028e37d81 [ 230.575251][ T25] head: 00fff00000000003 ffffea0001740201 ffffffffffffffff 0000000000000000 [ 230.583924][ T25] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 230.592602][ T25] page dumped because: kasan: bad access detected [ 230.599028][ T25] page_owner tracks the page as allocated [ 230.604739][ T25] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5842, tgid 5842 (syz-executor), ts 81100655634, free_ts 26320972991 [ 230.626110][ T25] post_alloc_hook+0x1f3/0x230 [ 230.630889][ T25] get_page_from_freelist+0x365c/0x37a0 [ 230.636442][ T25] __alloc_pages_noprof+0x292/0x710 [ 230.641640][ T25] alloc_pages_mpol_noprof+0x3e8/0x680 [ 230.647112][ T25] alloc_slab_page+0x6a/0x110 [ 230.651790][ T25] allocate_slab+0x5a/0x2b0 [ 230.656296][ T25] ___slab_alloc+0xc27/0x14a0 [ 230.660981][ T25] __slab_alloc+0x58/0xa0 [ 230.665319][ T25] __kmalloc_node_track_caller_noprof+0x2e9/0x4c0 [ 230.671740][ T25] kmemdup_noprof+0x2a/0x60 [ 230.676257][ T25] __addrconf_sysctl_register+0xb1/0x3a0 [ 230.681896][ T25] addrconf_sysctl_register+0x167/0x1c0 [ 230.687450][ T25] ipv6_add_dev+0xcf6/0x1220 [ 230.692051][ T25] addrconf_notify+0x6a7/0x1020 [ 230.696908][ T25] notifier_call_chain+0x1a5/0x3f0 [ 230.702033][ T25] register_netdevice+0x167f/0x1b00 [ 230.707239][ T25] page last free pid 1 tgid 1 stack trace: [ 230.713038][ T25] free_unref_page+0xd3f/0x1010 [ 230.717903][ T25] free_contig_range+0x14c/0x430 [ 230.722850][ T25] destroy_args+0x92/0x910 [ 230.727275][ T25] debug_vm_pgtable+0x4be/0x550 [ 230.732134][ T25] do_one_initcall+0x248/0x870 [ 230.736994][ T25] do_initcall_level+0x157/0x210 [ 230.741943][ T25] do_initcalls+0x3f/0x80 [ 230.746279][ T25] kernel_init_freeable+0x435/0x5d0 [ 230.751484][ T25] kernel_init+0x1d/0x2b0 [ 230.755816][ T25] ret_from_fork+0x4b/0x80 [ 230.760234][ T25] ret_from_fork_asm+0x1a/0x30 [ 230.764998][ T25] [ 230.767322][ T25] Memory state around the buggy address: [ 230.772947][ T25] ffff88805d00c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 230.781011][ T25] ffff88805d00c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 230.789088][ T25] >ffff88805d00c280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 230.797146][ T25] ^ [ 230.804613][ T25] ffff88805d00c300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 230.812693][ T25] ffff88805d00c380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 230.820763][ T25] ================================================================== [ 230.927523][ T25] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 230.934874][ T25] CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Not tainted 6.13.0-rc3-syzkaller-00154-g30b981796b94 #0 [ 230.945497][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 230.955590][ T25] Workqueue: events smc_ib_port_event_work [ 230.961448][ T25] Call Trace: [ 230.964748][ T25] [ 230.967702][ T25] dump_stack_lvl+0x241/0x360 [ 230.972422][ T25] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.977657][ T25] ? __pfx__printk+0x10/0x10 [ 230.982278][ T25] ? preempt_schedule+0xe1/0xf0 [ 230.987161][ T25] ? vscnprintf+0x5d/0x90 [ 230.991523][ T25] panic+0x349/0x880 [ 230.995454][ T25] ? check_panic_on_warn+0x21/0xb0 [ 231.000602][ T25] ? __pfx_panic+0x10/0x10 [ 231.005057][ T25] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 231.011072][ T25] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 231.017429][ T25] ? print_report+0x502/0x550 [ 231.022139][ T25] check_panic_on_warn+0x86/0xb0 [ 231.027108][ T25] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 231.033127][ T25] end_report+0x77/0x160 [ 231.037401][ T25] kasan_report+0x154/0x180 [ 231.041935][ T25] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 231.047960][ T25] __ethtool_get_link_ksettings+0x6e/0x190 [ 231.053873][ T25] ib_get_eth_speed+0x160/0x800 [ 231.058807][ T25] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 231.064229][ T25] ? rxe_query_port+0x4f/0x260 [ 231.069042][ T25] rxe_query_port+0x76/0x260 [ 231.073700][ T25] ib_query_port+0x166/0x7d0 [ 231.078332][ T25] smc_ib_port_event_work+0x14e/0xa50 [ 231.083753][ T25] ? process_scheduled_works+0x976/0x1840 [ 231.089512][ T25] process_scheduled_works+0xa66/0x1840 [ 231.095109][ T25] ? __pfx_process_scheduled_works+0x10/0x10 [ 231.101124][ T25] ? assign_work+0x364/0x3d0 [ 231.105757][ T25] worker_thread+0x870/0xd30 [ 231.110393][ T25] ? __kthread_parkme+0x169/0x1d0 [ 231.115454][ T25] ? __pfx_worker_thread+0x10/0x10 [ 231.120598][ T25] kthread+0x2f0/0x390 [ 231.124701][ T25] ? __pfx_worker_thread+0x10/0x10 [ 231.129840][ T25] ? __pfx_kthread+0x10/0x10 [ 231.134469][ T25] ret_from_fork+0x4b/0x80 [ 231.138916][ T25] ? __pfx_kthread+0x10/0x10 [ 231.143561][ T25] ret_from_fork_asm+0x1a/0x30 [ 231.148372][ T25] [ 231.151550][ T25] Kernel Offset: disabled [ 231.155968][ T25] Rebooting in 86400 seconds..